Skip to content

Commit 03a160b

Browse files
committed
edited the trivy file to change the format from templat to sarif and added the ouput correctly
1 parent 23dfe52 commit 03a160b

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

.github/workflows/unit-sec-test.yml

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -63,12 +63,11 @@ jobs:
6363
docker build -t awesome-fastapi:${{ github.sha }} . ###- This section needed to be added becasue the image was not persisting between jobs--##
6464
6565
- name: Run Trivy vulnerability scanner
66-
uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
66+
uses: aquasecurity/trivy-action@0.28.0
6767
with:
6868
image-ref: 'awesome-fastapi:${{ github.sha }}'
69-
format: 'template'
70-
template: '@/contrib/sarif.tpl'
71-
output: 'GitHub Actions/Trivy Automation'
69+
format: 'sarif'
70+
output: 'trivy-results.sarif'
7271
severity: 'CRITICAL,HIGH'
7372

7473
- name: Upload Trivy scan results to GitHub Security tab

0 commit comments

Comments
 (0)