mirror of
https://github.com/rocky-linux/sig-cloud-instance-images.git
synced 2024-06-01 06:00:15 +00:00
Update scan.yml
This commit is contained in:
parent
7312f86c8b
commit
6a23318269
18
.github/workflows/scan.yml
vendored
18
.github/workflows/scan.yml
vendored
|
@ -18,7 +18,7 @@ jobs:
|
|||
- name: Run Trivy vulnerability scanner
|
||||
uses: aquasecurity/trivy-action@master
|
||||
with:
|
||||
image-ref: 'docker.io/library/rockylinux:8'
|
||||
image-ref: 'docker.io/rockylinux/rockylinux:8'
|
||||
format: 'sarif'
|
||||
output: 'trivy-results.sarif'
|
||||
exit-code: '1'
|
||||
|
@ -36,17 +36,17 @@ jobs:
|
|||
uses: aquasecurity/trivy-action@master
|
||||
if: always()
|
||||
with:
|
||||
image-ref: 'docker.io/library/rockylinux:8'
|
||||
format: 'table'
|
||||
output: 'trivy-results'
|
||||
image-ref: 'docker.io/rockylinux/rockylinux:8'
|
||||
format: 'html'
|
||||
output: 'public/trivy-results'
|
||||
exit-code: '1'
|
||||
ignore-unfixed: true
|
||||
vuln-type: 'os,library'
|
||||
severity: 'CRITICAL,HIGH,MEDIUM'
|
||||
|
||||
- name: Save scan results as an artifact
|
||||
uses: actions/upload-artifact@v3
|
||||
if: always()
|
||||
- name: Save scan results to github pages
|
||||
uses: peaceiris/actions-gh-pages@v3
|
||||
if: ${{ github.ref == 'refs/heads/main' }}
|
||||
with:
|
||||
name: 'trivy-results'
|
||||
path: 'trivy-results'
|
||||
github_token: ${{ secrets.GITHUB_TOKEN }}
|
||||
publish_dir: ./public
|
||||
|
|
Loading…
Reference in New Issue
Block a user