|
4 | 4 | workflow_call: |
5 | 5 | inputs: |
6 | 6 | context: |
7 | | - description: 'Docker build context directory (e.g., ballerina-interpreter)' |
| 7 | + description: "Docker build context directory (e.g., ballerina-interpreter)" |
8 | 8 | required: true |
9 | 9 | type: string |
10 | 10 | image_name: |
11 | | - description: 'Docker image name without registry prefix (e.g., afm-ballerina-interpreter)' |
| 11 | + description: "Docker image name without registry prefix (e.g., afm-ballerina-interpreter)" |
12 | 12 | required: true |
13 | 13 | type: string |
14 | 14 | version: |
15 | | - description: 'Release version (e.g., 0.1.0)' |
| 15 | + description: "Release version (e.g., 0.1.0)" |
16 | 16 | required: true |
17 | 17 | type: string |
18 | 18 | branch: |
19 | | - description: 'Branch being released from' |
| 19 | + description: "Branch being released from" |
20 | 20 | required: true |
21 | 21 | type: string |
22 | 22 | image_title: |
23 | | - description: 'Human-readable image title for OCI labels (e.g., AFM Ballerina Interpreter)' |
| 23 | + description: "Human-readable image title for OCI labels (e.g., AFM Ballerina Interpreter)" |
24 | 24 | required: true |
25 | 25 | type: string |
26 | 26 |
|
@@ -82,17 +82,17 @@ jobs: |
82 | 82 | index:org.opencontainers.image.licenses=Apache-2.0 |
83 | 83 |
|
84 | 84 | - name: Scan Docker image for vulnerabilities |
85 | | - uses: aquasecurity/trivy-action@0.34 |
| 85 | + uses: aquasecurity/trivy-action@0.34.0 |
86 | 86 | with: |
87 | 87 | image-ref: ${{ steps.docker-tags.outputs.FULL_IMAGE }}:v${{ inputs.version }} |
88 | | - format: 'sarif' |
89 | | - output: 'trivy-results.sarif' |
90 | | - severity: 'CRITICAL,HIGH' |
| 88 | + format: "sarif" |
| 89 | + output: "trivy-results.sarif" |
| 90 | + severity: "CRITICAL,HIGH" |
91 | 91 | limit-severities-for-sarif: true |
92 | | - exit-code: '1' |
| 92 | + exit-code: "1" |
93 | 93 |
|
94 | 94 | - name: Upload Trivy scan results to GitHub Security tab |
95 | 95 | uses: github/codeql-action/upload-sarif@v4 |
96 | 96 | if: always() |
97 | 97 | with: |
98 | | - sarif_file: 'trivy-results.sarif' |
| 98 | + sarif_file: "trivy-results.sarif" |
0 commit comments