Trivy pipeline debug

This commit is contained in:
Samuel Huang
2024-10-05 10:27:04 +10:00
parent 6b445a5ee3
commit 2863e53b60

View File

@@ -21,11 +21,10 @@ jobs:
uses: aquasecurity/trivy-action@0.20.0 uses: aquasecurity/trivy-action@0.20.0
with: with:
scan-type: 'fs' scan-type: 'fs'
scan-ref: '.'
ignore-unfixed: true ignore-unfixed: true
format: 'sarif' format: 'sarif'
output: 'trivy-results.sarif' output: 'trivy-results.sarif'
#severity: 'CRITICAL' severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
- -
name: Upload Trivy scan results to GitHub Security tab name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3 uses: github/codeql-action/upload-sarif@v3