Skip to content

Commit 50c4f31

Browse files
authored
Update code-scans.yaml
Updated Trivy scan with latest stable version
1 parent 9ac9e55 commit 50c4f31

1 file changed

Lines changed: 5 additions & 3 deletions

File tree

.github/workflows/code-scans.yaml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ on:
77
description: 'Pull request number'
88
required: true
99
push:
10-
branches: [ main ]
10+
branches: [ main, dev ]
1111
pull_request:
1212
types: [opened, synchronize, reopened, ready_for_review]
1313

@@ -36,23 +36,25 @@ jobs:
3636
run: mkdir -p trivy-reports
3737

3838
- name: Run Trivy FS Scan
39-
uses: aquasecurity/trivy-action@0.28.0
39+
uses: aquasecurity/trivy-action@v0.35.0
4040
continue-on-error: true
4141
with:
4242
scan-type: 'fs'
4343
scan-ref: '.'
4444
scanners: 'vuln,misconfig,secret'
4545
severity: 'CRITICAL,HIGH'
4646
format: 'table'
47+
exit-code: 0
4748
output: 'trivy-reports/trivy_scan_report.txt'
4849

4950
- name: Run Trivy Image Scan - vllm-cpu
50-
uses: aquasecurity/trivy-action@0.28.0
51+
uses: aquasecurity/trivy-action@v0.35.0
5152
continue-on-error: true
5253
with:
5354
scan-type: 'image'
5455
image-ref: 'public.ecr.aws/q9t5s3a7/vllm-cpu-release-repo:v0.10.2'
5556
severity: 'HIGH,CRITICAL'
57+
exit-code: 0
5658
format: 'table'
5759
output: 'trivy-reports/trivy-vllm-cpu.txt'
5860

0 commit comments

Comments
 (0)