Skip to content

Commit 4eedbe7

Browse files
authored
Merge branch 'main' into sh-add-temp
2 parents 5c0e782 + 969ff69 commit 4eedbe7

File tree

1 file changed

+0
-28
lines changed

1 file changed

+0
-28
lines changed

.github/workflows/push.yml

Lines changed: 0 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -164,31 +164,3 @@ jobs:
164164
runs-on: ubuntu-latest
165165
steps:
166166
- run: echo "deploy was successful"
167-
168-
trivy-vulnerability-scanning:
169-
needs:
170-
- build_and_push
171-
- branch_meta
172-
runs-on: ubuntu-latest
173-
permissions:
174-
actions: read
175-
contents: read
176-
security-events: write
177-
steps:
178-
- name: run trivy vulnerability scanner
179-
uses: aquasecurity/trivy-action@0.33.1
180-
with:
181-
image-ref: 'ghcr.io/${{ github.repository }}:${{ needs.branch_meta.outputs.sha }}'
182-
format: 'sarif'
183-
output: 'trivy-results.sarif'
184-
scan-type: 'image'
185-
severity: 'CRITICAL,HIGH'
186-
ignore-unfixed: true
187-
env:
188-
TRIVY_SKIP_DB_UPDATE: true
189-
TRIVY_SKIP_JAVA_DB_UPDATE: true
190-
- name: upload trivy results
191-
if: ${{ always() }}
192-
uses: github/codeql-action/upload-sarif@v3
193-
with:
194-
sarif_file: 'trivy-results.sarif'

0 commit comments

Comments
 (0)