Skip to content

Commit 0bbe1b8

Browse files
committed
Updated github actions pipeline
1 parent f4941cd commit 0bbe1b8

1 file changed

Lines changed: 9 additions & 6 deletions

File tree

.github/workflows/main.yml

Lines changed: 9 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -101,7 +101,10 @@ jobs:
101101
with:
102102
image-ref: ghcr.io/adreaskar/javascriptgr:${{ github.run_id }}
103103
exit-code: 0
104-
format: table
104+
format: 'sarif'
105+
output: 'trivy-results.sarif'
106+
ignore-unfixed: true
107+
vuln-type: 'os,library'
105108

106109
# - name: Run Trivy for HIGH,CRITICAL CVEs and report (blocking)
107110
# uses: aquasecurity/trivy-action@master
@@ -114,11 +117,11 @@ jobs:
114117
# format: 'sarif'
115118
# output: 'trivy-results.sarif'
116119

117-
# - name: Upload Trivy scan results to GitHub Security tab
118-
# uses: github/codeql-action/upload-sarif@v3
119-
# if: always()
120-
# with:
121-
# sarif_file: 'trivy-results.sarif'
120+
- name: Upload Trivy scan results to GitHub Security tab
121+
uses: github/codeql-action/upload-sarif@v3
122+
if: always()
123+
with:
124+
sarif_file: 'trivy-results.sarif'
122125

123126
# Final Job: Build final image ============================================
124127
build-final-image:

0 commit comments

Comments
 (0)