fix(trivy): handle non-root user

Author: JasonTheDeveloper

src/trivy/devcontainer-feature.json

@@ -21,5 +21,8 @@
             "default": "",
             "description": "Select or enter additional plugins to install with Trivy (e.g., mcp for Model Context Protocol plugin)"
         }
+    },
+    "containerEnv": {
+        "TRIVY_HOME": "/usr/local/share/trivy"
     }
 }

src/trivy/install.sh

@@ -2,6 +2,7 @@
 
 TRIVY_VERSION="${VERSION:-"latest"}"
 TRIVY_PLUGINS="${PLUGINS:-""}"
+TRIVY_HOME="/usr/local/share/trivy"
 
 set -e
 
@@ -85,12 +86,21 @@ curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/inst
 # Verify installation
 trivy --version
 
+# Set up shared TRIVY_HOME so plugins are available to all users
+mkdir -p "${TRIVY_HOME}"
+export TRIVY_HOME
+
 # Install plugins if specified
 if [ -n "${TRIVY_PLUGINS}" ]; then
 	echo "Installing Trivy plugins..."
 	install_plugins "${TRIVY_PLUGINS}"
 fi
 
+# Ensure TRIVY_HOME is set for all users at runtime
+echo "export TRIVY_HOME=${TRIVY_HOME}" > /etc/profile.d/trivy.sh
+chmod +x /etc/profile.d/trivy.sh
+chmod -R a+rX "${TRIVY_HOME}"
+
 # Clean up
 rm -rf /var/lib/apt/lists/*