Skip to content

Commit

Permalink
Merge pull request #254 from sir-gon/develop
Browse files Browse the repository at this point in the history
[CONFIG] [Github Actions] Docker flow, trivy issue workaround (with J…
  • Loading branch information
sir-gon authored Nov 4, 2024
2 parents 7a94f4e + 7362be0 commit 47c3272
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions .github/workflows/docker-image.yml
Original file line number Diff line number Diff line change
Expand Up @@ -185,6 +185,7 @@ jobs:
format: 'table'
env:
TRIVY_DB_REPOSITORY: ${{ vars.TRIVY_DB_REPOSITORY }}
TRIVY_JAVA_DB_REPOSITORY: ${{ vars.TRIVY_JAVA_DB_REPOSITORY }}

- name: Run Trivy vulnerability scanner (sarif report)
uses: aquasecurity/trivy-action@0.28.0
Expand All @@ -194,6 +195,7 @@ jobs:
output: 'trivy-results.sarif'
env:
TRIVY_DB_REPOSITORY: ${{ vars.TRIVY_DB_REPOSITORY }}
TRIVY_JAVA_DB_REPOSITORY: ${{ vars.TRIVY_JAVA_DB_REPOSITORY }}

- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3
Expand Down

0 comments on commit 47c3272

Please sign in to comment.