We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 9ff192d commit 11abdacCopy full SHA for 11abdac
1 file changed
.github/workflows/scheduled-trivy.yml
@@ -29,12 +29,11 @@ jobs:
29
run: |
30
docker image build --tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }} .
31
32
- - name: Run Trivy vulnerability scanner
+ - name: Run Trivy vulnerability scanner (sarif report)
33
uses: aquasecurity/trivy-action@0.35.0
34
with:
35
- image-ref: 'appwrite/docker-base:${{ github.sha }}'
36
- format: 'template'
37
- template: '@/contrib/sarif.tpl'
+ format: 'sarif'
+ image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}'
38
output: 'trivy-image-results.sarif'
39
severity: 'CRITICAL,HIGH'
40
0 commit comments