From 6b92e9f58cc8a2c6105fb31ca7e3a5c42bd11d5e Mon Sep 17 00:00:00 2001 From: Neil Hanlon Date: Tue, 15 Mar 2022 08:51:15 -0400 Subject: [PATCH] Look for medium sev vulnerabilities --- .github/workflows/scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 67e64c9..aa60cc7 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -24,7 +24,7 @@ jobs: exit-code: '1' ignore-unfixed: true vuln-type: 'os,library' - severity: 'CRITICAL,HIGH' + severity: 'CRITICAL,HIGH,MEDIUM' - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v1