File tree Expand file tree Collapse file tree 1 file changed +3
-23
lines changed
Expand file tree Collapse file tree 1 file changed +3
-23
lines changed Original file line number Diff line number Diff line change 11name : Trivy Dependency Scan
22
33on :
4- schedule :
5- # Run daily at 2 AM UTC
6- - cron : ' 0 2 * * *'
74 workflow_dispatch :
85 pull_request :
96 paths :
2724 https://packages.confluent.io/maven/org/apache/kafka/kafka-clients/7.9.5-ccs/kafka-clients-7.9.5-ccs.jar
2825
2926 - name : Run Trivy vulnerability scanner
30- uses : aquasecurity/ trivy-action@master
27+ uses : hypertrace/github-actions/ trivy-image-scan@main
3128 with :
32- scan-type : ' fs'
33- scan-ref : ' artifacts/kafka-clients-7.9.5-ccs.jar'
34- format : ' sarif'
35- output : ' trivy-results.sarif'
36- severity : ' CRITICAL,HIGH'
37-
38- - name : Upload Trivy results to GitHub Security tab
39- uses : github/codeql-action/upload-sarif@v3
40- if : always()
41- with :
42- sarif_file : ' trivy-results.sarif'
43-
44- - name : Run Trivy vulnerability scanner (table output)
45- uses : aquasecurity/trivy-action@master
46- with :
47- scan-type : ' fs'
48- scan-ref : ' artifacts/kafka-clients-7.9.5-ccs.jar'
49- format : ' table'
50- severity : ' CRITICAL,HIGH'
29+ image : artifacts/kafka-clients-7.9.5-ccs.jar
30+ output-mode : github
You can’t perform that action at this time.
0 commit comments