update workflow
This commit is contained in:
parent
69372e1c9c
commit
ef7466cb90
@ -47,7 +47,6 @@ jobs:
|
|||||||
linux/amd64
|
linux/amd64
|
||||||
linux/arm/v7
|
linux/arm/v7
|
||||||
linux/arm64
|
linux/arm64
|
||||||
linux/386
|
|
||||||
push: false
|
push: false
|
||||||
no-cache: true
|
no-cache: true
|
||||||
tags: |
|
tags: |
|
||||||
@ -55,19 +54,15 @@ jobs:
|
|||||||
${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:v0.2.19
|
${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:v0.2.19
|
||||||
|
|
||||||
- name: Run Trivy vulnerability scanner
|
- name: Run Trivy vulnerability scanner
|
||||||
uses: aquasecurity/trivy-action@0.27.0
|
uses: astounds/trivy-action@v1
|
||||||
with:
|
with:
|
||||||
image-ref: ${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:latest
|
image: ${{ secrets.DOCKER_REGISTRY_USER}}/yt-local:latest
|
||||||
format: 'table'
|
|
||||||
exit-code: '1'
|
|
||||||
ignore-unfixed: true
|
|
||||||
vuln-type: 'os'
|
|
||||||
severity: 'CRITICAL,HIGH'
|
severity: 'CRITICAL,HIGH'
|
||||||
env:
|
pkg-types: 'os'
|
||||||
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
|
format: 'table'
|
||||||
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
|
ignore-unfixed: true
|
||||||
TRIVY_SKIP_DB_UPDATE: false
|
exit-code: '1'
|
||||||
TRIVY_SKIP_JAVA_DB_UPDATE: false
|
version: 'v0.58.2'
|
||||||
|
|
||||||
- name: Push Docker image
|
- name: Push Docker image
|
||||||
uses: docker/build-push-action@v6
|
uses: docker/build-push-action@v6
|
||||||
|
Loading…
x
Reference in New Issue
Block a user