Update trivy sarif upload action to associate to branch ref

Signed-off-by: Émile Ré <emile@probo.com>
2026-06-03 16:20:12 +02:00
parent ab05e501ac
commit e29dc4fee9
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/release-probod.yaml
+++ b/.github/workflows/release-probod.yaml
@@ -328,6 +328,9 @@ jobs:
        if: always()
        with:
          sarif_file: "trivy-results.sarif"
+          ref: "refs/heads/main"
+          sha: ${{ github.sha }}
+          category: "trivy-docker-image"
      - name: "Compose release notes"
        env:
          IMAGE_TAG: ${{ needs.docker-manifest.outputs.image_tag }}