fix: use docker image for trivy vulnerability scanner
Some checks failed
CI/CD Awesome Pipeline / Test (push) Successful in 1m23s
CI/CD Awesome Pipeline / Build & Push to Registry (push) Failing after 5m9s

This commit is contained in:
2025-12-22 11:38:35 +01:00
parent ec99a501fc
commit 8a87d94e6d

View File

@@ -74,13 +74,11 @@ jobs:
RUNNER=${{ steps.config.outputs.runner }} RUNNER=${{ steps.config.outputs.runner }}
- name: 🛡️ Run Trivy Vulnerability Scanner - name: 🛡️ Run Trivy Vulnerability Scanner
uses: aquasecurity/trivy-action@master uses: docker://aquasec/trivy:latest
env: env:
TRIVY_USERNAME: ${{ gitea.actor }}
TRIVY_PASSWORD: ${{ secrets.G1T34_TOKEN }}
# Unset the fake GITHUB_TOKEN injected by Gitea # Unset the fake GITHUB_TOKEN injected by Gitea
GITHUB_TOKEN: "" GITHUB_TOKEN: ""
with: with:
image-ref: ${{ steps.meta.outputs.tags }} args: image --format table --exit-code 1 --ignore-unfixed --severity CRITICAL,HIGH gitea.iswearihadsomethingforthis.net/francwa/${{ steps.config.outputs.image_name }}:latest
format: 'table'
exit-code: '1'
ignore-unfixed: true
severity: 'CRITAL, HIGH'