lingwei.kong/hawkbit
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Update trivy-scan.yml

Browse Source
This commit is contained in:
Avgustin Marinov
2023-12-10 15:42:15 +02:00
committed by GitHub
parent 38044c17a6
commit 61a1d58e4d
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/trivy-scan.yml vendored
View File

@@ -46,7 +46,7 @@ jobs:
- name: Scan Docker images - name: Scan Docker images
run: | run: |
mkdir -p scans/eclipse/hawkbit mkdir -p scans/eclipse/hawkbit
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit-*:latest"); do for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
echo "Scanning image ${IMAGE} ..." echo "Scanning image ${IMAGE} ..."
./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/hawkbit/$IMAGE.sarif" --format sarif ./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/hawkbit/$IMAGE.sarif" --format sarif
done done
@@ -55,4 +55,4 @@ jobs:
uses: github/codeql-action/upload-sarif@v2 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: 'scans/eclipse/hawkbit' sarif_file: 'scans/eclipse/hawkbit'
category: "Container Images" category: "Container Images"