diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 507cd98..be4b95a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -97,7 +97,7 @@ jobs:
path: "${{ github.workspace }}/dependency-results.sbom.json"
retention-days: 20
- - name: Analyze image with Anchore💊
+ - name: Analyze image with Grype💊
id: anchore
uses: anchore/scan-action@v3.6.4
with:
@@ -105,7 +105,7 @@ jobs:
fail-build: false
severity-cutoff: critical
- - name: Upload Anchore report📊
+ - name: Upload Grype report📊
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: ${{ steps.anchore.outputs.sarif }}
@@ -113,7 +113,7 @@ jobs:
- name: Analyze image with Syft💊
uses: anchore/sbom-action@v0.16.0
with:
- syft-version: v1.6.0
+ syft-version: v1.8.0
image: ghcr.io/ammnt/freenginx:main
artifact-name: image.spdx.json
dependency-snapshot: false
diff --git a/README.md b/README.md
index 9a7318d..d9d4e3d 100644
--- a/README.md
+++ b/README.md
@@ -28,7 +28,7 @@ or
- No excess ENTRYPOINT in the image;
- Slimmed version by Docker Slim tool;
- Scanned effiniefficiency result with Dive tool;
-- Scanned by vulnerability scanners: GitHub, Docker Scout, Snyk, Anchore, Clair and Syft;
+- Scanned by vulnerability scanners: GitHub, Docker Scout, Snyk, Grype, Clair and Syft;
- Anonymous signature - removed "Server" header ("banner"):
https://github.com/ammnt/freenginx/blob/main/Dockerfile