update workflow
This commit is contained in:
parent
69372e1c9c
commit
ef7466cb90
@ -47,7 +47,6 @@ jobs:
|
||||
linux/amd64
|
||||
linux/arm/v7
|
||||
linux/arm64
|
||||
linux/386
|
||||
push: false
|
||||
no-cache: true
|
||||
tags: |
|
||||
@ -55,19 +54,15 @@ jobs:
|
||||
${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:v0.2.19
|
||||
|
||||
- name: Run Trivy vulnerability scanner
|
||||
uses: aquasecurity/trivy-action@0.27.0
|
||||
uses: astounds/trivy-action@v1
|
||||
with:
|
||||
image-ref: ${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:latest
|
||||
format: 'table'
|
||||
exit-code: '1'
|
||||
ignore-unfixed: true
|
||||
vuln-type: 'os'
|
||||
image: ${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:latest
|
||||
severity: 'CRITICAL,HIGH'
|
||||
env:
|
||||
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
|
||||
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
|
||||
TRIVY_SKIP_DB_UPDATE: false
|
||||
TRIVY_SKIP_JAVA_DB_UPDATE: false
|
||||
pkg-types: 'os'
|
||||
format: 'table'
|
||||
ignore-unfixed: true
|
||||
exit-code: '1'
|
||||
version: 'v0.58.2'
|
||||
|
||||
- name: Push Docker image
|
||||
uses: docker/build-push-action@v6
|
||||
|
Loading…
x
Reference in New Issue
Block a user