mirror of
https://github.com/tommytran732/Matrix.to-Docker
synced 2024-11-22 10:01:34 -05:00
Report all vulnerabilities
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
37eb92672d
commit
ffd6a10253
6
.github/workflows/build.yml
vendored
6
.github/workflows/build.yml
vendored
@ -80,10 +80,10 @@ jobs:
|
|||||||
format: 'template'
|
format: 'template'
|
||||||
template: '@/contrib/sarif.tpl'
|
template: '@/contrib/sarif.tpl'
|
||||||
output: 'trivy-results.sarif'
|
output: 'trivy-results.sarif'
|
||||||
severity: 'CRITICAL,HIGH'
|
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
|
||||||
vuln-type: "os"
|
vuln-type: "os,library"
|
||||||
|
|
||||||
- name: Upload Trivy scan results to GitHub Security tab
|
- name: Upload Trivy scan results to GitHub Security tab
|
||||||
uses: github/codeql-action/upload-sarif@v2
|
uses: github/codeql-action/upload-sarif@v3
|
||||||
with:
|
with:
|
||||||
sarif_file: 'trivy-results.sarif'
|
sarif_file: 'trivy-results.sarif'
|
4
.github/workflows/scan.yml
vendored
4
.github/workflows/scan.yml
vendored
@ -18,8 +18,8 @@ jobs:
|
|||||||
format: 'template'
|
format: 'template'
|
||||||
template: '@/contrib/sarif.tpl'
|
template: '@/contrib/sarif.tpl'
|
||||||
output: 'trivy-results.sarif'
|
output: 'trivy-results.sarif'
|
||||||
severity: 'CRITICAL,HIGH'
|
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
|
||||||
vuln-type: "os"
|
vuln-type: "os,library"
|
||||||
|
|
||||||
- name: Upload Trivy scan results to GitHub Security tab
|
- name: Upload Trivy scan results to GitHub Security tab
|
||||||
uses: github/codeql-action/upload-sarif@v3
|
uses: github/codeql-action/upload-sarif@v3
|
||||||
|
Loading…
Reference in New Issue
Block a user