rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Upload trivy scan results to GitHub security tab

Browse Source 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2025-10-16 14:11:14 +02:00
parent 7e8c45ae65
commit 4671dc7ac6
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/make.yaml vendored
View File

@@ -15,6 +15,7 @@ jobs:
contents: "read" contents: "read"
packages: "write" packages: "write"
id-token: "write" id-token: "write"
security-events: "write"
steps: steps:
- uses: "actions/checkout@v4" - uses: "actions/checkout@v4"
with: with:
@@ -40,11 +41,16 @@ jobs:
- uses: "aquasecurity/trivy-action@0.28.0" - uses: "aquasecurity/trivy-action@0.28.0"
with: with:
image-ref: "ghcr.io/getprobo/probo:latest-amd64" image-ref: "ghcr.io/getprobo/probo:latest-amd64"
format: "table" format: "sarif"
output: "trivy-results.sarif"
exit-code: 1 exit-code: 1
ignore-unfixed: true ignore-unfixed: true
vuln-type: "os,library" vuln-type: "os,library"
severity: "CRITICAL,HIGH" severity: "CRITICAL,HIGH"
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: 'trivy-results.sarif'
test: test:
name: "test" name: "test"