Rework the trivy scan job

This commit is contained in:
2026-01-15 16:45:21 +00:00
parent 5ff1e935a3
commit 8e3404bd51

View File

@@ -17,10 +17,9 @@ jobs:
continue-on-error: true continue-on-error: true
run: | run: |
docker run --rm \ docker run --rm \
-v "${GITHUB_WORKSPACE}:/work" \ --volumes-from "$HOSTNAME" \
-w /work/guardutils/chguard \
aquasec/trivy:latest \ aquasec/trivy:latest \
fs . \ fs /workspace/guardutils/chguard \
--scanners vuln \ --scanners vuln \
--pkg-types library \ --pkg-types library \
--include-dev-deps \ --include-dev-deps \
@@ -28,7 +27,6 @@ jobs:
--ignore-unfixed \ --ignore-unfixed \
--format json \ --format json \
--output trivy.json \ --output trivy.json \
--debug \
--exit-code 1 --exit-code 1
- name: Notify Node-RED on vulnerabilities - name: Notify Node-RED on vulnerabilities