switch eclipse/hawkbit to eclipse-hawkbit/hawkbit in trivy

This commit is contained in:
Stanislav Trailov
2024-10-07 18:02:36 +03:00
committed by GitHub
parent ce0b7dd456
commit a036171451

View File

@@ -49,11 +49,11 @@ jobs:
mkdir -p scans/eclipse/hawkbit mkdir -p scans/eclipse/hawkbit
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
echo "Scanning image ${IMAGE} ..." echo "Scanning image ${IMAGE} ..."
./trivy image "${IMAGE}" --ignore-unfixed --ignorefile .github/workflows/.trivyignore --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/$IMAGE.sarif" --format sarif --insecure ./trivy image "${IMAGE}" --ignore-unfixed --ignorefile .github/workflows/.trivyignore --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse-hawkbit/$IMAGE.sarif" --format sarif --insecure
done done
- name: Upload Docker image scan results to GitHub Security tab - name: Upload Docker image scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: 'scans/eclipse/hawkbit' sarif_file: 'scans/eclipse-hawkbit/hawkbit'
category: "Container Images" category: "Container Images"