final Sysdig image scan

Author: higakikeita

.github/workflows/scan.yml

@@ -20,45 +20,39 @@ jobs:
           docker build -t worker ./worker
           docker build -t result ./result
 
-      - name: 🛡️ Scan voting-app with Sysdig
-        env:
-          SECURE_API_TOKEN: ${{ secrets.SECURE_API_TOKEN }}
+      - name: 🔍 Scan with Sysdig (voting-app)
         run: |
           docker run --rm \
             --platform linux/amd64 \
             --user 0 \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SECURE_API_TOKEN=$SECURE_API_TOKEN \
+            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
               --apiurl https://app.au1.sysdig.com \
               --loglevel info \
               --skiptlsverify \
               docker://voting-app
 
-      - name: 🛡️ Scan worker with Sysdig
-        env:
-          SECURE_API_TOKEN: ${{ secrets.SECURE_API_TOKEN }}
+      - name: 🔍 Scan with Sysdig (worker)
         run: |
           docker run --rm \
             --platform linux/amd64 \
             --user 0 \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SECURE_API_TOKEN=$SECURE_API_TOKEN \
+            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
               --apiurl https://app.au1.sysdig.com \
               --loglevel info \
               --skiptlsverify \
               docker://worker
 
-      - name: 🛡️ Scan result with Sysdig
-        env:
-          SECURE_API_TOKEN: ${{ secrets.SECURE_API_TOKEN }}
+      - name: 🔍 Scan with Sysdig (result)
         run: |
           docker run --rm \
             --platform linux/amd64 \
             --user 0 \
             -v /var/run/docker.sock:/var/run/docker.sock \
-            -e SECURE_API_TOKEN=$SECURE_API_TOKEN \
+            -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
             quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
               --apiurl https://app.au1.sysdig.com \
               --loglevel info \