From cf9ca5362c3842521684e7aad0cf69e59c028f35 Mon Sep 17 00:00:00 2001 From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com> Date: Mon, 20 May 2024 19:40:29 +0530 Subject: [PATCH] Update main.yml --- .github/workflows/main.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 62d4fa9..b26b563 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -104,10 +104,12 @@ jobs: uses: aquasecurity/trivy-action@master with: scan-type: 'fs' - ignore-unfixed: true format: 'sarif' output: 'trivy-results.sarif' severity: 'CRITICAL,LOW,MEDIUM,HIGH' + vuln-type: 'os,library' + scanners: 'vuln,secret' + - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v2 @@ -260,6 +262,8 @@ jobs: severity: 'CRITICAL,HIGH,MEDIUM,LOW' github-pat: ${{ secrets.PAT_TOKEN }} docker-host: //var/run/docker.sock + vuln-type: 'os,library' + scanners: 'vuln,secret' - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v2