lingwei.kong/hawkbit
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Scan only latest image. Do only scan library vulnerabilities. (#1339)

Browse Source
This commit is contained in:
Michael Herdt
2023-03-28 16:24:54 +02:00
committed by GitHub
parent 6f854afdae
commit 17bf633df9
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/trivy-scan.yml vendored
View File

@@ -43,9 +43,9 @@ jobs:
- name: Scan Docker images - name: Scan Docker images
run: | run: |
mkdir -p scans/eclipse/hawkbit mkdir -p scans/eclipse/hawkbit
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit-*"); do for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit-*:latest"); do
echo "Scanning image ${IMAGE} ..." echo "Scanning image ${IMAGE} ..."
./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --output "scans/eclipse/hawkbit/$IMAGE.sarif" --format sarif ./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/hawkbit/$IMAGE.sarif" --format sarif
done done
- name: Upload Docker image scan results to GitHub Security tab - name: Upload Docker image scan results to GitHub Security tab