Skip to content

Commit

Permalink
Merge pull request #256 from bci-oss/bugfix/cleanup-trivy-scan
Browse files Browse the repository at this point in the history
deleted comment outdated code in respect of trivy scan failure
  • Loading branch information
agg3fe authored Nov 24, 2023
2 parents 65037a7 + 918f137 commit a913a91
Showing 1 changed file with 0 additions and 6 deletions.
6 changes: 0 additions & 6 deletions .github/workflows/trivy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -43,16 +43,13 @@ jobs:
uses: actions/checkout@v3

- name: Run Trivy vulnerability scanner in repo mode
# uses: aquasecurity/trivy-action@master
uses: aquasecurity/[email protected]
with:
scan-type: "config"
# ignore-unfixed: true
# exit-code: "1"
hide-progress: false
format: "sarif"
output: "trivy-results1.sarif"
# severity: "CRITICAL,HIGH"
vuln-type: "os,library"

- name: Upload Trivy scan results to GitHub Security tab
Expand Down Expand Up @@ -81,16 +78,13 @@ jobs:
run: mvn clean package

- name: Run Trivy vulnerability scanner
# uses: aquasecurity/trivy-action@master
uses: aquasecurity/[email protected]
with:
image-ref: "tractusx/sldt-digital-twin-registry:latest"
# ignore-unfixed: true
# exit-code: "1"
hide-progress: false
format: "sarif"
output: "trivy-results-registry.sarif"
# severity: "CRITICAL,HIGH"
vuln-type: "os,library"
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
Expand Down

0 comments on commit a913a91

Please sign in to comment.