From 4671dc7ac6498e533c7f8d44e73886bef4f99bca Mon Sep 17 00:00:00 2001 From: Bryan Frimin Date: Thu, 16 Oct 2025 14:11:14 +0200 Subject: [PATCH] Upload trivy scan results to GitHub security tab Signed-off-by: Bryan Frimin --- .github/workflows/make.yaml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml index 59dcdcab1..eaec1987e 100644 --- a/.github/workflows/make.yaml +++ b/.github/workflows/make.yaml @@ -15,6 +15,7 @@ jobs: contents: "read" packages: "write" id-token: "write" + security-events: "write" steps: - uses: "actions/checkout@v4" with: @@ -40,11 +41,16 @@ jobs: - uses: "aquasecurity/trivy-action@0.28.0" with: image-ref: "ghcr.io/getprobo/probo:latest-amd64" - format: "table" + format: "sarif" + output: "trivy-results.sarif" exit-code: 1 ignore-unfixed: true vuln-type: "os,library" severity: "CRITICAL,HIGH" + - name: Upload Trivy scan results to GitHub Security tab + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: 'trivy-results.sarif' test: name: "test"