From e29dc4fee9e01144a1785540966b6a0af13137e6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89mile=20R=C3=A9?= <emile@probo.com>
Date: Wed, 3 Jun 2026 16:20:12 +0200
Subject: [PATCH] Update trivy sarif upload action to associate to branch ref
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Émile Ré <emile@probo.com>
---
 .github/workflows/release-probod.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release-probod.yaml b/.github/workflows/release-probod.yaml
index 999d1e7c5..9f2128a23 100644
--- a/.github/workflows/release-probod.yaml
+++ b/.github/workflows/release-probod.yaml
@@ -328,6 +328,9 @@ jobs:
         if: always()
         with:
           sarif_file: "trivy-results.sarif"
+          ref: "refs/heads/main"
+          sha: ${{ github.sha }}
+          category: "trivy-docker-image"
       - name: "Compose release notes"
         env:
           IMAGE_TAG: ${{ needs.docker-manifest.outputs.image_tag }}