Skip to content

Commit b07efe7

Browse files
committed
Refine the args for the trivy-action #1729
Signed-off-by: tdruez <[email protected]>
1 parent c037b25 commit b07efe7

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

.github/workflows/check-sca-integrations.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -20,10 +20,10 @@ jobs:
2020
with:
2121
scan-type: 'image'
2222
image-ref: 'python:3.13-slim'
23-
format: 'github'
24-
output: 'dependency-results.sbom.json'
25-
severity: "MEDIUM,HIGH,CRITICAL"
26-
scanners: "vuln"
23+
format: 'cyclonedx'
24+
output: 'dependency-results.sbom.cdx.json'
25+
scanners: 'vuln,license'
26+
version: 'latest'
2727

2828
- name: Upload trivy report as a Github artifact
2929
uses: actions/upload-artifact@v4

0 commit comments

Comments
 (0)