correct Sysdig image scan workflow

Author: higakikeita

.github/workflows/scan.yml

@@ -10,40 +10,48 @@ jobs:
   image-scan:
     runs-on: ubuntu-latest
 
+    # 🧪 環境変数の注入（ここが非常に重要）
     env:
-      SYSDIG_SECURE_URL: https://app.au1.sysdig.com
+      SECURE_API_TOKEN: ${{ secrets.SECURE_API_TOKEN }}
+      SYS_DIG_SECURE_URL: https://app.au1.sysdig.com
 
     steps:
-      - name: Checkout code
+      - name: 🛎️ Checkout code
         uses: actions/checkout@v3
 
-      - name: Build Docker images
+      - name: 🏗️ Build Docker images
         run: |
           docker build -t voting-app ./vote
           docker build -t worker ./worker
           docker build -t result ./result
 
-      - name: Scan voting-app image with Sysdig CLI
+      - name: 🔍 Run Sysdig Scan (voting-app)
         run: |
           docker run --rm \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
-            scan --apiurl "${SYSDIG_SECURE_URL}" docker://voting-app
+              scan \
+              --apiurl $SYS_DIG_SECURE_URL \
+              --token $SECURE_API_TOKEN \
+              docker://voting-app
 
-      - name: Scan worker image with Sysdig CLI
+      - name: 🔍 Run Sysdig Scan (worker)
         run: |
           docker run --rm \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
-            scan --apiurl "${SYSDIG_SECURE_URL}" docker://worker
+              scan \
+              --apiurl $SYS_DIG_SECURE_URL \
+              --token $SECURE_API_TOKEN \
+              docker://worker
 
-      - name: Scan result image with Sysdig CLI
+      - name: 🔍 Run Sysdig Scan (result)
         run: |
           docker run --rm \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
-            scan --apiurl "${SYSDIG_SECURE_URL}" docker://result
+              scan \
+              --apiurl $SYS_DIG_SECURE_URL \
+              --token $SECURE_API_TOKEN \
+              docker://result