Use sbom file for grype
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
2
.github/workflows/make.yaml
vendored
2
.github/workflows/make.yaml
vendored
@@ -122,7 +122,7 @@ jobs:
|
|||||||
run: echo "${HOME}/.local/bin" >> "$GITHUB_PATH"
|
run: echo "${HOME}/.local/bin" >> "$GITHUB_PATH"
|
||||||
- uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
|
- uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
|
||||||
with:
|
with:
|
||||||
path: ./
|
sbom: "sbom.json"
|
||||||
fail-build: true
|
fail-build: true
|
||||||
severity-cutoff: critical
|
severity-cutoff: critical
|
||||||
output-format: table
|
output-format: table
|
||||||
|
|||||||
2
.github/workflows/release.yaml
vendored
2
.github/workflows/release.yaml
vendored
@@ -97,7 +97,7 @@ jobs:
|
|||||||
- name: Run vulnerability scan
|
- name: Run vulnerability scan
|
||||||
uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
|
uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
|
||||||
with:
|
with:
|
||||||
path: ./
|
sbom: "sbom.json"
|
||||||
fail-build: true
|
fail-build: true
|
||||||
severity-cutoff: critical
|
severity-cutoff: critical
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user