diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 507cd98..be4b95a 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -97,7 +97,7 @@ jobs: path: "${{ github.workspace }}/dependency-results.sbom.json" retention-days: 20 - - name: Analyze image with Anchore💊 + - name: Analyze image with Grype💊 id: anchore uses: anchore/scan-action@v3.6.4 with: @@ -105,7 +105,7 @@ jobs: fail-build: false severity-cutoff: critical - - name: Upload Anchore report📊 + - name: Upload Grype report📊 uses: github/codeql-action/upload-sarif@v3 with: sarif_file: ${{ steps.anchore.outputs.sarif }} @@ -113,7 +113,7 @@ jobs: - name: Analyze image with Syft💊 uses: anchore/sbom-action@v0.16.0 with: - syft-version: v1.6.0 + syft-version: v1.8.0 image: ghcr.io/ammnt/freenginx:main artifact-name: image.spdx.json dependency-snapshot: false diff --git a/README.md b/README.md index 9a7318d..d9d4e3d 100644 --- a/README.md +++ b/README.md @@ -28,7 +28,7 @@ or
- No excess ENTRYPOINT in the image; - Slimmed version by Docker Slim tool; - Scanned effiniefficiency result with Dive tool; -- Scanned by vulnerability scanners: GitHub, Docker Scout, Snyk, Anchore, Clair and Syft; +- Scanned by vulnerability scanners: GitHub, Docker Scout, Snyk, Grype, Clair and Syft; - Anonymous signature - removed "Server" header ("banner"):
https://github.com/ammnt/freenginx/blob/main/Dockerfile