File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -101,7 +101,10 @@ jobs:
101101 with :
102102 image-ref : ghcr.io/adreaskar/javascriptgr:${{ github.run_id }}
103103 exit-code : 0
104- format : table
104+ format : ' sarif'
105+ output : ' trivy-results.sarif'
106+ ignore-unfixed : true
107+ vuln-type : ' os,library'
105108
106109 # - name: Run Trivy for HIGH,CRITICAL CVEs and report (blocking)
107110 # uses: aquasecurity/trivy-action@master
@@ -114,11 +117,11 @@ jobs:
114117 # format: 'sarif'
115118 # output: 'trivy-results.sarif'
116119
117- # - name: Upload Trivy scan results to GitHub Security tab
118- # uses: github/codeql-action/upload-sarif@v3
119- # if: always()
120- # with:
121- # sarif_file: 'trivy-results.sarif'
120+ - name : Upload Trivy scan results to GitHub Security tab
121+ uses : github/codeql-action/upload-sarif@v3
122+ if : always()
123+ with :
124+ sarif_file : ' trivy-results.sarif'
122125
123126 # Final Job: Build final image ============================================
124127 build-final-image :
You can’t perform that action at this time.
0 commit comments