switch eclipse/hawkbit to eclipse-hawkbit/hawkbit in trivy
This commit is contained in:
committed by
GitHub
parent
ce0b7dd456
commit
a036171451
4
.github/workflows/trivy-scan.yml
vendored
4
.github/workflows/trivy-scan.yml
vendored
@@ -49,11 +49,11 @@ jobs:
|
|||||||
mkdir -p scans/eclipse/hawkbit
|
mkdir -p scans/eclipse/hawkbit
|
||||||
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
|
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
|
||||||
echo "Scanning image ${IMAGE} ..."
|
echo "Scanning image ${IMAGE} ..."
|
||||||
./trivy image "${IMAGE}" --ignore-unfixed --ignorefile .github/workflows/.trivyignore --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/$IMAGE.sarif" --format sarif --insecure
|
./trivy image "${IMAGE}" --ignore-unfixed --ignorefile .github/workflows/.trivyignore --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse-hawkbit/$IMAGE.sarif" --format sarif --insecure
|
||||||
done
|
done
|
||||||
|
|
||||||
- name: Upload Docker image scan results to GitHub Security tab
|
- name: Upload Docker image scan results to GitHub Security tab
|
||||||
uses: github/codeql-action/upload-sarif@v2
|
uses: github/codeql-action/upload-sarif@v2
|
||||||
with:
|
with:
|
||||||
sarif_file: 'scans/eclipse/hawkbit'
|
sarif_file: 'scans/eclipse-hawkbit/hawkbit'
|
||||||
category: "Container Images"
|
category: "Container Images"
|
||||||
|
|||||||
Reference in New Issue
Block a user