Tomster/Matrix.to-Docker
1
0
Fork 0
mirror of https://github.com/tommytran732/Matrix.to-Docker synced 2024-11-22 10:01:34 -05:00
Code

Switch Clair to Grype

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-06-12 01:52:46 -07:00
parent 0924408ecd
commit 7d3dd174af
Signed by: Tomster
GPG Key ID: 555C902A34EC968F
1 changed files with 10 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
.github/workflows/build.yml vendored
View File

@ -88,24 +88,23 @@ jobs:
uses: github/codeql-action/upload-sarif@v3 uses: github/codeql-action/upload-sarif@v3
with: with:
sarif_file: 'trivy-results.sarif' sarif_file: 'trivy-results.sarif'
category: trivy category: 'trivy'
clair: grype:
name: Scan current image with Clair name: Scan current image with Grype
needs: build needs: build
permissions: permissions:
security-events: write security-events: write
runs-on: "ubuntu-latest" runs-on: "ubuntu-latest"
steps: steps:
- name: Run Clair vulnerability scanner - name: Run Grype vulnerability scanner
uses: quay/clair-action@main uses: anchore/scan-action@v3
id: grype
with: with:
image-ref: 'ghcr.io/tommytran732/matrix.to' image: "ghcr.io/tommytran732/matrix.to"
format: sarif
output: clair_results.sarif
- name: Upload Trivy scan results to GitHub Security tab - name: Upload Grype scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3 uses: github/codeql-action/upload-sarif@v3
with: with:
sarif_file: 'clair_results.sarif' sarif_file: ${{ steps.scan.outputs.sarif }}
category: clair category: grype