mirror of
https://github.com/tommytran732/Matrix.to-Docker
synced 2024-09-07 18:23:30 -04:00
Report all vulnerabilities
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
37eb92672d
commit
ffd6a10253
6
.github/workflows/build.yml
vendored
6
.github/workflows/build.yml
vendored
@ -80,10 +80,10 @@ jobs:
|
||||
format: 'template'
|
||||
template: '@/contrib/sarif.tpl'
|
||||
output: 'trivy-results.sarif'
|
||||
severity: 'CRITICAL,HIGH'
|
||||
vuln-type: "os"
|
||||
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
|
||||
vuln-type: "os,library"
|
||||
|
||||
- name: Upload Trivy scan results to GitHub Security tab
|
||||
uses: github/codeql-action/upload-sarif@v2
|
||||
uses: github/codeql-action/upload-sarif@v3
|
||||
with:
|
||||
sarif_file: 'trivy-results.sarif'
|
4
.github/workflows/scan.yml
vendored
4
.github/workflows/scan.yml
vendored
@ -18,8 +18,8 @@ jobs:
|
||||
format: 'template'
|
||||
template: '@/contrib/sarif.tpl'
|
||||
output: 'trivy-results.sarif'
|
||||
severity: 'CRITICAL,HIGH'
|
||||
vuln-type: "os"
|
||||
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
|
||||
vuln-type: "os,library"
|
||||
|
||||
- name: Upload Trivy scan results to GitHub Security tab
|
||||
uses: github/codeql-action/upload-sarif@v3
|
||||
|
Loading…
Reference in New Issue
Block a user