diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index aa3bd3b4e..e5d962ca4 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -46,7 +46,7 @@ jobs: - name: Scan Docker images run: | mkdir -p scans/eclipse/hawkbit - for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit-*:latest"); do + for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do echo "Scanning image ${IMAGE} ..." ./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/hawkbit/$IMAGE.sarif" --format sarif done @@ -55,4 +55,4 @@ jobs: uses: github/codeql-action/upload-sarif@v2 with: sarif_file: 'scans/eclipse/hawkbit' - category: "Container Images" \ No newline at end of file + category: "Container Images"