Update trivy-scan.yml
This commit is contained in:
4
.github/workflows/trivy-scan.yml
vendored
4
.github/workflows/trivy-scan.yml
vendored
@@ -46,7 +46,7 @@ jobs:
|
||||
- name: Scan Docker images
|
||||
run: |
|
||||
mkdir -p scans/eclipse/hawkbit
|
||||
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit-*:latest"); do
|
||||
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
|
||||
echo "Scanning image ${IMAGE} ..."
|
||||
./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/hawkbit/$IMAGE.sarif" --format sarif
|
||||
done
|
||||
@@ -55,4 +55,4 @@ jobs:
|
||||
uses: github/codeql-action/upload-sarif@v2
|
||||
with:
|
||||
sarif_file: 'scans/eclipse/hawkbit'
|
||||
category: "Container Images"
|
||||
category: "Container Images"
|
||||
|
||||
Reference in New Issue
Block a user