From 9c7987e3637cef35d1702701a36583550aec6d4c Mon Sep 17 00:00:00 2001 From: Neil Hanlon Date: Fri, 25 Mar 2022 09:59:59 -0400 Subject: [PATCH] save results publicly Signed-off-by: Neil Hanlon --- .github/workflows/scan.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index aa60cc7..2041cd0 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -31,3 +31,22 @@ jobs: if: always() with: sarif_file: 'trivy-results.sarif' + + - name: Run Trivy vulnerability scanner + uses: aquasecurity/trivy-action@master + if: always() + with: + image-ref: 'docker.io/library/rockylinux:8' + format: 'table' + output: 'trivy-results' + exit-code: '1' + ignore-unfixed: true + vuln-type: 'os,library' + severity: 'CRITICAL,HIGH,MEDIUM' + + - name: Save scan results as an artifact + uses: actions/upload-artifact@v3 + if: always() + with: + name: 'trivy-results' + path: 'trivy-results'