Rework the trivy scan job
This commit is contained in:
@@ -17,10 +17,9 @@ jobs:
|
|||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
run: |
|
run: |
|
||||||
docker run --rm \
|
docker run --rm \
|
||||||
-v "${GITHUB_WORKSPACE}:/work" \
|
--volumes-from "$HOSTNAME" \
|
||||||
-w /work/guardutils/chguard \
|
|
||||||
aquasec/trivy:latest \
|
aquasec/trivy:latest \
|
||||||
fs . \
|
fs /workspace/guardutils/chguard \
|
||||||
--scanners vuln \
|
--scanners vuln \
|
||||||
--pkg-types library \
|
--pkg-types library \
|
||||||
--include-dev-deps \
|
--include-dev-deps \
|
||||||
@@ -28,7 +27,6 @@ jobs:
|
|||||||
--ignore-unfixed \
|
--ignore-unfixed \
|
||||||
--format json \
|
--format json \
|
||||||
--output trivy.json \
|
--output trivy.json \
|
||||||
--debug \
|
|
||||||
--exit-code 1
|
--exit-code 1
|
||||||
|
|
||||||
- name: Notify Node-RED on vulnerabilities
|
- name: Notify Node-RED on vulnerabilities
|
||||||
|
|||||||
Reference in New Issue
Block a user