Skip to content

Commit 0a66006

Browse files
committed
Fix GitHub Action Trivy Analysis warnings
Update trivy-action to 0.17.0 Close keycloak#27264 Signed-off-by: Yves Galante <yves.galante@jmob.net>
1 parent 1c3890b commit 0a66006

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

.github/workflows/trivy-analysis.yml

+2-3
Original file line numberDiff line numberDiff line change
@@ -22,15 +22,14 @@ jobs:
2222
uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55
2323
with:
2424
image-ref: quay.io/keycloak/${{ matrix.container}}:nightly
25-
format: template
26-
template: '@/contrib/sarif.tpl'
25+
format: sarif
2726
output: trivy-results.sarif
2827
severity: MEDIUM,CRITICAL,HIGH
2928
ignore-unfixed: true
30-
security-checks: vuln
3129
timeout: 15m
3230

3331
- name: Upload Trivy scan results to GitHub Security tab
3432
uses: github/codeql-action/upload-sarif@v3
3533
with:
3634
sarif_file: trivy-results.sarif
35+
category: ${{ matrix.container}}

0 commit comments

Comments
 (0)