Skip to content

chore: updated CHANGELOG #2984

chore: updated CHANGELOG

chore: updated CHANGELOG #2984

Workflow file for this run

name: Trivy Security Scan
on:
push:
workflow_dispatch:
jobs:
security_scan_rootfs:
name: security_scan_rootfs
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Run static analysis (rootfs)
uses: aquasecurity/trivy-action@0.24.0
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
with:
scan-type: "rootfs"
scanners: "vuln,misconfig"
ignore-unfixed: true
format: "sarif"
output: "trivy-results-rootfs.sarif"
severity: "CRITICAL,HIGH"
github-pat: ${{ secrets.GITHUB_TOKEN }}
security_scan_repo:
name: security_scan_repo
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Run static analysis (repo)
uses: aquasecurity/trivy-action@0.24.0
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
with:
scan-type: "repo"
scanners: "vuln,misconfig"
ignore-unfixed: true
format: "sarif"
output: "trivy-results-repo.sarif"
severity: "CRITICAL,HIGH"
github-pat: ${{ secrets.GITHUB_TOKEN }}
- name: Upload Trivy scan results to GitHub Security tab (repo)
uses: github/codeql-action/upload-sarif@v2
continue-on-error: true
with:
sarif_file: "trivy-results-repo.sarif"
category: "code"