Browse Source

Use image tag

Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
pull/4545/head
Maksim Nabokikh 4 weeks ago committed by GitHub
parent
commit
354dbd1167
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 10
      .github/workflows/artifacts.yaml

10
.github/workflows/artifacts.yaml

@ -204,19 +204,13 @@ jobs:
key: trivy-cache-${{ steps.date.outputs.date }}
restore-keys: trivy-cache-
- name: Debug - list extracted files
run: |
ls -la image/
find image -type f | head -20
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # 0.34.0
with:
input: image
format: sarif
output: trivy-results.sarif
scan-type: "fs"
scan-ref: "."
scan-type: "image"
scan-ref: ${{ steps.image-ref.outputs.value }}
cache-dir: "./cache"
# Disable skipping trivy cache for now
env:

Loading…
Cancel
Save