correct Sysdig image scan workflow

Author: higakikeita

.github/workflows/scan.yml

@@ -2,19 +2,19 @@ name: Sysdig Image Scan
 
 on:
   push:
-    branches: [main]
+    branches:
+      - main
   workflow_dispatch:
 
 env:
-  SYSDIG_SECURE_TOKEN: ${{ secrets.SECURE_API_TOKEN }}
   SYSDIG_SECURE_URL: https://app.au1.sysdig.com
 
 jobs:
-  scan:
+  image-scan:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout source
+      - name: Checkout code
         uses: actions/checkout@v3
 
       - name: Build Docker images
@@ -23,29 +23,27 @@ jobs:
           docker build -t worker ./worker
           docker build -t result ./result
 
-      - name: Run Sysdig Scan via Docker image (scan subcommand)
+      - name: Run Sysdig Scan on voting-app
         run: |
           docker run --rm \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SYSDIG_SECURE_TOKEN=$SYSDIG_SECURE_TOKEN \
+            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
-              scan \
-              --apiurl $SYSDIG_SECURE_URL \
-              docker://voting-app
+              scan --apiurl $SYSDIG_SECURE_URL docker://voting-app
 
+      - name: Run Sysdig Scan on worker
+        run: |
           docker run --rm \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SYSDIG_SECURE_TOKEN=$SYSDIG_SECURE_TOKEN \
+            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
-              scan \
-              --apiurl $SYSDIG_SECURE_URL \
-              docker://worker
+              scan --apiurl $SYSDIG_SECURE_URL docker://worker
 
+      - name: Run Sysdig Scan on result
+        run: |
           docker run --rm \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SYSDIG_SECURE_TOKEN=$SYSDIG_SECURE_TOKEN \
+            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
-              scan \
-              --apiurl $SYSDIG_SECURE_URL \
-              docker://result
+              scan --apiurl $SYSDIG_SECURE_URL docker://result