Skip to content

Commit

Permalink
Update scan-vulns.yaml
Browse files Browse the repository at this point in the history
  • Loading branch information
binbin-li authored Oct 16, 2024
1 parent d5fe440 commit 4567522
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions .github/workflows/scan-vulns.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -60,6 +60,7 @@ jobs:
ignore-unfixed: true
scanners: 'vuln'
skip-setup-trivy: true
version: v0.49.1

- name: Build docker images
run: |
Expand All @@ -73,6 +74,7 @@ jobs:
image-ref: 'localbuild:test'
ignore-unfixed: true
skip-setup-trivy: true
version: v0.49.1

- name: Run Trivy vulnerability scanner on localbuildcrd:test
uses: aquasecurity/trivy-action@5681af892cd0f4997658e2bacc62bd0a894cf564 # 0.27.0
Expand All @@ -81,6 +83,7 @@ jobs:
image-ref: 'localbuildcrd:test'
ignore-unfixed: true
skip-setup-trivy: true
version: v0.49.1

- name: Run Trivy vulnerability scanner on localbuild:test and exit on HIGH severity
uses: aquasecurity/trivy-action@5681af892cd0f4997658e2bacc62bd0a894cf564 # 0.27.0
Expand All @@ -91,6 +94,7 @@ jobs:
severity: 'HIGH,CRITICAL'
exit-code: '1'
skip-setup-trivy: true
version: v0.49.1

- name: Run Trivy vulnerability scanner on localbuildcrd:test and exit on HIGH severity
uses: aquasecurity/trivy-action@5681af892cd0f4997658e2bacc62bd0a894cf564 # 0.27.0
Expand All @@ -101,3 +105,4 @@ jobs:
severity: 'HIGH,CRITICAL'
exit-code: '1'
skip-setup-trivy: true
version: v0.49.1

0 comments on commit 4567522

Please sign in to comment.