Update trivy-scan.yml

This commit is contained in:
Avgustin Marinov
2023-12-10 15:42:15 +02:00
committed by GitHub
parent 38044c17a6
commit 61a1d58e4d

View File

@@ -46,7 +46,7 @@ jobs:
- name: Scan Docker images
run: |
mkdir -p scans/eclipse/hawkbit
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit-*:latest"); do
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
echo "Scanning image ${IMAGE} ..."
./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/hawkbit/$IMAGE.sarif" --format sarif
done
@@ -55,4 +55,4 @@ jobs:
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'scans/eclipse/hawkbit'
category: "Container Images"
category: "Container Images"