fix: use docker image for trivy vulnerability scanner
This commit is contained in:
@@ -74,13 +74,11 @@ jobs:
|
|||||||
RUNNER=${{ steps.config.outputs.runner }}
|
RUNNER=${{ steps.config.outputs.runner }}
|
||||||
|
|
||||||
- name: 🛡️ Run Trivy Vulnerability Scanner
|
- name: 🛡️ Run Trivy Vulnerability Scanner
|
||||||
uses: aquasecurity/trivy-action@master
|
uses: docker://aquasec/trivy:latest
|
||||||
env:
|
env:
|
||||||
|
TRIVY_USERNAME: ${{ gitea.actor }}
|
||||||
|
TRIVY_PASSWORD: ${{ secrets.G1T34_TOKEN }}
|
||||||
# Unset the fake GITHUB_TOKEN injected by Gitea
|
# Unset the fake GITHUB_TOKEN injected by Gitea
|
||||||
GITHUB_TOKEN: ""
|
GITHUB_TOKEN: ""
|
||||||
with:
|
with:
|
||||||
image-ref: ${{ steps.meta.outputs.tags }}
|
args: image --format table --exit-code 1 --ignore-unfixed --severity CRITICAL,HIGH gitea.iswearihadsomethingforthis.net/francwa/${{ steps.config.outputs.image_name }}:latest
|
||||||
format: 'table'
|
|
||||||
exit-code: '1'
|
|
||||||
ignore-unfixed: true
|
|
||||||
severity: 'CRITAL, HIGH'
|
|
||||||
|
|||||||
Reference in New Issue
Block a user