fix: conditionall cache if not exist yet

Doc-only:true Required-githooks: true Signed-off-by: Tomasz Gromadzki <[email protected]>
daos-stack · Oct 25, 2024 · 373552e · 373552e
1 parent 7119e67
commit 373552e
Showing 1 changed file with 13 additions and 3 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -27,21 +27,31 @@ jobs:
         id: date
         run: echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_OUTPUT
 
-      - name: Download and extract the vulnerability DB
+      - id: db-downloaded
+        name: DB cached already
+        uses: actions/cache@v1
+        with:
+          path: ${{ github.workspace }}/.cache/trivy
+          key: cache-trivy-${{ steps.date.outputs.date }}
+
+      - if: ${{ steps.db-downloaded.outputs.cache-hit != 'true' }}
+        name: Download and extract the vulnerability DB
         run: |
           mkdir -p $GITHUB_WORKSPACE/.cache/trivy/db
           oras pull ghcr.io/aquasecurity/trivy-db:2
           tar -xzf db.tar.gz -C $GITHUB_WORKSPACE/.cache/trivy/db
           rm db.tar.gz
 
-      - name: Download and extract the Java DB
+      - if: ${{ steps.db-downloaded.outputs.cache-hit != 'true' }}
+        name: Download and extract the Java DB
         run: |
           mkdir -p $GITHUB_WORKSPACE/.cache/trivy/java-db
           oras pull ghcr.io/aquasecurity/trivy-java-db:1
           tar -xzf javadb.tar.gz -C $GITHUB_WORKSPACE/.cache/trivy/java-db
           rm javadb.tar.gz
 
-      - name: Cache DBs
+      - if: ${{ steps.db-downloaded.outputs.cache-hit != 'true' }}
+        name: Cache DBs
         uses: actions/cache/save@v4
         with:
           path: ${{ github.workspace }}/.cache/trivy