From ffd6a1025334cbec0373778d6f2c4f0116f6ba51 Mon Sep 17 00:00:00 2001 From: Tommy Date: Thu, 30 May 2024 11:53:29 -0700 Subject: [PATCH] Report all vulnerabilities Signed-off-by: Tommy --- .github/workflows/build.yml | 6 +++--- .github/workflows/scan.yml | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 76028e2..32ca2eb 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -80,10 +80,10 @@ jobs: format: 'template' template: '@/contrib/sarif.tpl' output: 'trivy-results.sarif' - severity: 'CRITICAL,HIGH' - vuln-type: "os" + severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL' + vuln-type: "os,library" - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: sarif_file: 'trivy-results.sarif' \ No newline at end of file diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 1e4374c..8e83ad1 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -18,8 +18,8 @@ jobs: format: 'template' template: '@/contrib/sarif.tpl' output: 'trivy-results.sarif' - severity: 'CRITICAL,HIGH' - vuln-type: "os" + severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL' + vuln-type: "os,library" - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3