Skip to content

Commit

Permalink
comment image scan part
Browse files Browse the repository at this point in the history
  • Loading branch information
Sonmezturk committed Nov 17, 2023
1 parent b0edf5f commit 0266110
Showing 1 changed file with 8 additions and 8 deletions.
16 changes: 8 additions & 8 deletions .github/workflows/build-push-image.yml
Original file line number Diff line number Diff line change
Expand Up @@ -49,14 +49,14 @@ jobs:
tags: "${{ env.ECR_REPOSITORY_URL_APP }}:${{ env.IMAGE_TAG }}"
push: false

- name: Scan image - High and Critical Severity
uses: aquasecurity/trivy-action@master
with:
image-ref: "${{ env.ECR_REPOSITORY_URL_APP }}:${{ env.IMAGE_TAG }}"
format: sarif
output: trivy-results.sarif
hide-progress: false
exit-code: 1
# - name: Scan image - High and Critical Severity
# uses: aquasecurity/trivy-action@master
# with:
# image-ref: "${{ env.ECR_REPOSITORY_URL_APP }}:${{ env.IMAGE_TAG }}"
# format: sarif
# output: trivy-results.sarif
# hide-progress: false
# exit-code: 1

- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
Expand Down

0 comments on commit 0266110

Please sign in to comment.