mirror of
https://github.com/tommytran732/Synapse-Docker
synced 2024-11-09 18:11:34 -05:00
Report all vulnerabilities
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
2e034b0fd8
commit
78cdb7fdce
4
.github/workflows/build.yml
vendored
4
.github/workflows/build.yml
vendored
@ -86,8 +86,8 @@ jobs:
|
|||||||
format: 'template'
|
format: 'template'
|
||||||
template: '@/contrib/sarif.tpl'
|
template: '@/contrib/sarif.tpl'
|
||||||
output: 'trivy-results.sarif'
|
output: 'trivy-results.sarif'
|
||||||
severity: 'CRITICAL,HIGH'
|
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
|
||||||
vuln-type: "os"
|
vuln-type: "os,library"
|
||||||
|
|
||||||
- name: Upload Trivy scan results to GitHub Security tab
|
- name: Upload Trivy scan results to GitHub Security tab
|
||||||
uses: github/codeql-action/upload-sarif@v2
|
uses: github/codeql-action/upload-sarif@v2
|
||||||
|
4
.github/workflows/scan.yml
vendored
4
.github/workflows/scan.yml
vendored
@ -18,8 +18,8 @@ jobs:
|
|||||||
format: 'template'
|
format: 'template'
|
||||||
template: '@/contrib/sarif.tpl'
|
template: '@/contrib/sarif.tpl'
|
||||||
output: 'trivy-results.sarif'
|
output: 'trivy-results.sarif'
|
||||||
severity: 'CRITICAL,HIGH'
|
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
|
||||||
vuln-type: "os"
|
vuln-type: "os,library"
|
||||||
|
|
||||||
- name: Upload Trivy scan results to GitHub Security tab
|
- name: Upload Trivy scan results to GitHub Security tab
|
||||||
uses: github/codeql-action/upload-sarif@v3
|
uses: github/codeql-action/upload-sarif@v3
|
||||||
|
Loading…
Reference in New Issue
Block a user