From 6afb0d293294469ed0eb704905578ade1c74c2c9 Mon Sep 17 00:00:00 2001 From: Maris Beer <33232047+hackmybeer@users.noreply.github.com> Date: Tue, 25 Jun 2024 18:34:48 +0200 Subject: [PATCH] Update trivy.yml --- .github/workflows/trivy.yml | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 130b98b..9282f73 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -29,15 +29,11 @@ jobs: - name: Checkout code uses: actions/checkout@v4 - - name: Build an image from Dockerfile - run: | - docker build -t docker.io/my-organization/my-app:${{ github.sha }} . - - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe with: - image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}' - format: 'template' + scan-type: 'fs' + scan-ref: '.' template: '@/contrib/sarif.tpl' output: 'trivy-results.sarif' severity: 'CRITICAL,HIGH'