Skip to content

Commit

Permalink
Few fixes 2
Browse files Browse the repository at this point in the history
Required-githooks: true

Signed-off-by: Tomasz Gromadzki <[email protected]>
  • Loading branch information
grom72 committed Jul 25, 2024
1 parent ed4a56c commit 2d136aa
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 3 deletions.
14 changes: 12 additions & 2 deletions .github/workflows/trivy_new.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,8 +19,7 @@ jobs:
scan-type: 'fs'
scan-ref: '.'
trivy-config: 'utils/trivy/trivy.yaml'
output: 'trivy-report-daos.txt'
template: '@./utils/trivy/csv.tpl'
format: template

- name: Prepare the report to be uploaded to the GitHub artifact store
run: |
Expand All @@ -34,6 +33,17 @@ jobs:
path: report/*
name: trivy-report-daos

- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/[email protected]

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 1: third-party GitHubAction not pinned by hash
Click Remediation section below to solve this issue
with:
scan-type: 'fs'
scan-ref: '.'
trivy-config: 'utils/trivy/trivy.yaml'
format: 'table'

- name: Show results
run: cat trivy-report-daos.txt

- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/[email protected]

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 1: third-party GitHubAction not pinned by hash
Click Remediation section below to solve this issue
with:
Expand Down
2 changes: 1 addition & 1 deletion utils/trivy/trivy.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,6 @@ db:
debug: false
dependency-tree: true
exit-code: 0
format: template
generate-default-config: false
ignore-policy: ""
ignorefile: ./utils/trivy/.trivyignore
Expand Down Expand Up @@ -198,6 +197,7 @@ misconfiguration:
module:
dir:
enable-modules: []
output: "trivy-report-daos.txt"
output-plugin-arg: ""
quiet: false
registry:
Expand Down

0 comments on commit 2d136aa

Please sign in to comment.