From 68a8888ea180403ea0cb56cab702de5440114e71 Mon Sep 17 00:00:00 2001 From: Stanislav Trailov Date: Mon, 7 Oct 2024 18:09:35 +0300 Subject: [PATCH] remove --insecure from trivy file --- .github/workflows/trivy-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index b4cc0d5dd..58050a11f 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -49,7 +49,7 @@ jobs: mkdir -p scans/eclipse/hawkbit for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do echo "Scanning image ${IMAGE} ..." - ./trivy image "${IMAGE}" --ignore-unfixed --ignorefile .github/workflows/.trivyignore --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse-hawkbit/$IMAGE.sarif" --format sarif --insecure + ./trivy image "${IMAGE}" --ignore-unfixed --ignorefile .github/workflows/.trivyignore --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse-hawkbit/$IMAGE.sarif" --format sarif done - name: Upload Docker image scan results to GitHub Security tab