Skip to content

build(deps): bump the cargo group with 2 updates #4

build(deps): bump the cargo group with 2 updates

build(deps): bump the cargo group with 2 updates #4

Workflow file for this run

name: Trivy - Scan
on:
pull_request:
jobs:
trivy:
name: Scan
runs-on: ubuntu-latest
steps:
- name: Checkout project
uses: actions/checkout@v4
- name: Run Trivy scanner - generate update
uses: aquasecurity/trivy-action@master
env:
TRIVY_SKIP_DB_UPDATE: true
TRIVY_SKIP_JAVA_DB_UPDATE: true
with:
scan-type: fs
format: table
scan-ref: .
hide-progress: false
output: trivy.txt
- name: Publish Trivy Output to Summary
run: |
if [[ -s trivy.txt ]]; then
{
echo "### Security Output"
echo '```terraform'
cat trivy.txt
echo '```'
} >> $GITHUB_STEP_SUMMARY
fi
- name: Run Trivy scanner - Fail build on Criticial Vulnerabilities
uses: aquasecurity/trivy-action@master
env:
TRIVY_SKIP_DB_UPDATE: true
TRIVY_SKIP_JAVA_DB_UPDATE: true
with:
scan-type: fs
format: table
scan-ref: .
hide-progress: false
output: trivy.txt
severity: CRITICAL
ignore-unfixed: true
exit-code: 1