1.0.49 Update dockerfile security scan

webpwnized · Oct 15, 2023 · 205faca · 205faca
1 parent 07839a7
commit 205faca
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/.github/workflows/run-trivy.yml → ...workflows/scan-dockerfiles-with-trivy.yml b/.github/workflows/run-trivy.yml → ...workflows/scan-dockerfiles-with-trivy.yml
@@ -7,24 +7,24 @@ on:
   pull_request:
 jobs:
   build:
-    name: Run Trivy
+    name: Run Trivy on Dockerfile
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Run Trivy vulnerability scanner in IaC mode
         uses: aquasecurity/trivy-action@master
         with:
           scan-type: 'config'
           hide-progress: false
           format: 'sarif'
-          output: 'trivy-results.sarif'
+          output: 'dockerfile-trivy-scan-results.sarif'
           exit-code: '1'
           ignore-unfixed: true
-          severity: 'CRITICAL,HIGH'
+          severity: 'CRITICAL,HIGH,MEDIUM'
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v2
         with:
-          sarif_file: 'trivy-results.sarif'
+          sarif_file: 'dockerfile-trivy-scan-results.sarif'
diff --git a/version b/version
@@ -1 +1 @@
-1.0.48
+1.0.49