Fix docker command to trivy scan
This commit is contained in:
@@ -17,7 +17,8 @@ jobs:
|
|||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
run: |
|
run: |
|
||||||
docker run --rm \
|
docker run --rm \
|
||||||
--volumes-from "$HOSTNAME" \
|
-v "$PWD:/work" \
|
||||||
|
-w /work \
|
||||||
aquasec/trivy:latest \
|
aquasec/trivy:latest \
|
||||||
fs . \
|
fs . \
|
||||||
--scanners vuln \
|
--scanners vuln \
|
||||||
@@ -26,7 +27,7 @@ jobs:
|
|||||||
--severity MEDIUM,HIGH,CRITICAL \
|
--severity MEDIUM,HIGH,CRITICAL \
|
||||||
--ignore-unfixed \
|
--ignore-unfixed \
|
||||||
--format json \
|
--format json \
|
||||||
--output /workspace/chguard/trivy.json \
|
--output trivy.json \
|
||||||
--exit-code 1
|
--exit-code 1
|
||||||
|
|
||||||
- name: Notify Node-RED on vulnerabilities
|
- name: Notify Node-RED on vulnerabilities
|
||||||
|
|||||||
Reference in New Issue
Block a user