update trivy file in attempt to fix trivy build

This commit is contained in:
Stanislav Trailov
2024-10-07 17:28:53 +03:00
committed by GitHub
parent 19f6f2a90c
commit ce0b7dd456

View File

@@ -49,7 +49,7 @@ jobs:
mkdir -p scans/eclipse/hawkbit
for IMAGE in $(docker image ls --format "{{.Repository}}:{{.Tag}}" "hawkbit/hawkbit-*:latest"); do
echo "Scanning image ${IMAGE} ..."
./trivy image "${IMAGE}" --ignore-unfixed --ignorefile .github/workflows/.trivyignore --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/$IMAGE.sarif" --format sarif
./trivy image "${IMAGE}" --ignore-unfixed --ignorefile .github/workflows/.trivyignore --severity HIGH,CRITICAL --vuln-type library --output "scans/eclipse/$IMAGE.sarif" --format sarif --insecure
done
- name: Upload Docker image scan results to GitHub Security tab