update workflow

This commit is contained in:
Astound 2025-01-20 10:31:10 +08:00
parent 69372e1c9c
commit ef7466cb90
Signed by: kaiser
GPG Key ID: 97504AF0027B1A56

View File

@ -47,7 +47,6 @@ jobs:
linux/amd64
linux/arm/v7
linux/arm64
linux/386
push: false
no-cache: true
tags: |
@ -55,19 +54,15 @@ jobs:
${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:v0.2.19
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@0.27.0
uses: astounds/trivy-action@v1
with:
image-ref: ${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:latest
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os'
image: ${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:latest
severity: 'CRITICAL,HIGH'
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
TRIVY_SKIP_DB_UPDATE: false
TRIVY_SKIP_JAVA_DB_UPDATE: false
pkg-types: 'os'
format: 'table'
ignore-unfixed: true
exit-code: '1'
version: 'v0.58.2'
- name: Push Docker image
uses: docker/build-push-action@v6