diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 70c314b..5dd5da4 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -86,8 +86,8 @@ jobs: format: 'template' template: '@/contrib/sarif.tpl' output: 'trivy-results.sarif' - severity: 'CRITICAL,HIGH' - vuln-type: "os" + severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL' + vuln-type: "os,library" - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v2 diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 7cb7daa..64a59aa 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -18,8 +18,8 @@ jobs: format: 'template' template: '@/contrib/sarif.tpl' output: 'trivy-results.sarif' - severity: 'CRITICAL,HIGH' - vuln-type: "os" + severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL' + vuln-type: "os,library" - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3