Skip to content

Commit 780aab6

Browse files
committed
update trivy action
1 parent 88bc648 commit 780aab6

File tree

1 file changed

+3
-23
lines changed

1 file changed

+3
-23
lines changed
Lines changed: 3 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,6 @@
11
name: Trivy Dependency Scan
22

33
on:
4-
schedule:
5-
# Run daily at 2 AM UTC
6-
- cron: '0 2 * * *'
74
workflow_dispatch:
85
pull_request:
96
paths:
@@ -27,24 +24,7 @@ jobs:
2724
https://packages.confluent.io/maven/org/apache/kafka/kafka-clients/7.9.5-ccs/kafka-clients-7.9.5-ccs.jar
2825
2926
- name: Run Trivy vulnerability scanner
30-
uses: aquasecurity/trivy-action@master
27+
uses: hypertrace/github-actions/trivy-image-scan@main
3128
with:
32-
scan-type: 'fs'
33-
scan-ref: 'artifacts/kafka-clients-7.9.5-ccs.jar'
34-
format: 'sarif'
35-
output: 'trivy-results.sarif'
36-
severity: 'CRITICAL,HIGH'
37-
38-
- name: Upload Trivy results to GitHub Security tab
39-
uses: github/codeql-action/upload-sarif@v3
40-
if: always()
41-
with:
42-
sarif_file: 'trivy-results.sarif'
43-
44-
- name: Run Trivy vulnerability scanner (table output)
45-
uses: aquasecurity/trivy-action@master
46-
with:
47-
scan-type: 'fs'
48-
scan-ref: 'artifacts/kafka-clients-7.9.5-ccs.jar'
49-
format: 'table'
50-
severity: 'CRITICAL,HIGH'
29+
image: artifacts/kafka-clients-7.9.5-ccs.jar
30+
output-mode: github

0 commit comments

Comments
 (0)