Skip to content

Commit f353a79

Browse files
committed
ci: update trivy-action to a valid version tag
1 parent d16b6de commit f353a79

1 file changed

Lines changed: 6 additions & 3 deletions

File tree

.github/workflows/test.yml

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -104,6 +104,12 @@ jobs:
104104
steps:
105105
- name: Checkout repository
106106
uses: actions/checkout@v4
107+
- name: Log in to the GitHub Container Registry
108+
uses: docker/login-action@v3
109+
with:
110+
registry: ghcr.io
111+
username: ${{ github.actor }}
112+
password: ${{ secrets.GITHUB_TOKEN }}
107113

108114
- name: Run Trivy vulnerability scanner
109115
uses: aquasecurity/trivy-action@0.33.1
@@ -112,13 +118,10 @@ jobs:
112118
format: "sarif"
113119
output: "trivy-results.sarif"
114120
severity: "CRITICAL,HIGH"
115-
116-
# Add these two lines to allow the workflow to continue
117121
ignore-unfixed: true
118122
exit-code: "0"
119123

120124
- name: Upload Trivy scan results to GitHub Security tab
121125
uses: github/codeql-action/upload-sarif@v3
122-
# This step will now run because the previous one succeeds
123126
with:
124127
sarif_file: "trivy-results.sarif"

0 commit comments

Comments
 (0)