Update trivy-scan.yml (2)
This commit is contained in:
2
.github/workflows/trivy-scan.yml
vendored
2
.github/workflows/trivy-scan.yml
vendored
@@ -48,7 +48,7 @@ jobs:
|
|||||||
mkdir -p scans/eclipse/hawkbit
|
mkdir -p scans/eclipse/hawkbit
|
||||||
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
|
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
|
||||||
echo "Scanning image ${IMAGE} ..."
|
echo "Scanning image ${IMAGE} ..."
|
||||||
./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/hawkbit/$IMAGE.sarif" --format sarif
|
./trivy image "${IMAGE}" --ignore-unfixed --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/$IMAGE.sarif" --format sarif
|
||||||
done
|
done
|
||||||
|
|
||||||
- name: Upload Docker image scan results to GitHub Security tab
|
- name: Upload Docker image scan results to GitHub Security tab
|
||||||
|
|||||||
Reference in New Issue
Block a user