1
0
mirror of https://github.com/tommytran732/Synapse-Docker synced 2024-11-09 11:51:33 -05:00

Compare commits

...

2 Commits

Author SHA1 Message Date
59660a1ce6
Bump codeql action in build workflow
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-30 11:46:03 -07:00
78cdb7fdce
Report all vulnerabilities
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-30 11:43:49 -07:00
2 changed files with 5 additions and 5 deletions

View File

@ -86,10 +86,10 @@ jobs:
format: 'template'
template: '@/contrib/sarif.tpl'
output: 'trivy-results.sarif'
severity: 'CRITICAL,HIGH'
vuln-type: "os"
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
vuln-type: "os,library"
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: 'trivy-results.sarif'

View File

@ -18,8 +18,8 @@ jobs:
format: 'template'
template: '@/contrib/sarif.tpl'
output: 'trivy-results.sarif'
severity: 'CRITICAL,HIGH'
vuln-type: "os"
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
vuln-type: "os,library"
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3