debug

ministryofjustice · Sep 25, 2023 · 4078410 · 4078410
1 parent 2d41fca
commit 4078410
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/.github/workflows/reusable-workflow-terraform.yml b/.github/workflows/reusable-workflow-terraform.yml
@@ -61,12 +61,17 @@ jobs:
         id: terraform_static_analysis_trivy
         uses: aquasecurity/trivy-action@fbd16365eb88e12433951383f5e99bd901fc618f # v0.12.0
         with:
-          scan-type: repo
+          scan-type: config
           ignore-unfixed: true
+          output: 'trivy-results.sarif'
           format: sarif
           exit-code: '1'
-          severity: CRITICAL,HIGH
-          skip-dirs: containers/
+          severity: CRITICAL
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'
 
       - name: Check for Static Analysis Override Label
         if: github.ref != 'refs/heads/main'