djoka/bentopdf
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

fix: update Trivy action to latest version and improve SARIF upload step

Browse Source
This commit is contained in:
alam00000
2026-03-17 22:57:00 +05:30
parent 23b072ea10
commit 01dc3005d7
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.github/workflows/trivy-scan.yml vendored
View File

@@ -42,7 +42,7 @@ jobs:
cache-to: type=gha,mode=max,scope=trivy-${{ matrix.image.name }}
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@0.28.0
uses: aquasecurity/trivy-action@master
with:
image-ref: ${{ matrix.image.name }}:scan
format: sarif
@@ -51,7 +51,7 @@ jobs:
exit-code: '1'
- name: Upload Trivy results to GitHub Security
uses: github/codeql-action/upload-sarif@v3
uses: github/codeql-action/upload-sarif@v4
if: always()
with:
sarif_file: trivy-${{ matrix.image.name }}.sarif
@@ -64,7 +64,7 @@ jobs:
uses: actions/checkout@v4
- name: Scan npm dependencies with Trivy
uses: aquasecurity/trivy-action@0.28.0
uses: aquasecurity/trivy-action@master
with:
scan-type: fs
scan-ref: .
@@ -74,7 +74,7 @@ jobs:
scanners: vuln
- name: Upload dependency scan results
uses: github/codeql-action/upload-sarif@v3
uses: github/codeql-action/upload-sarif@v4
if: always()
with:
sarif_file: trivy-deps.sarif
@@ -87,7 +87,7 @@ jobs:
uses: actions/checkout@v4
- name: Scan Dockerfiles for misconfigurations
uses: aquasecurity/trivy-action@0.28.0
uses: aquasecurity/trivy-action@master
with:
scan-type: config
scan-ref: .
@@ -96,7 +96,7 @@ jobs:
severity: CRITICAL,HIGH
- name: Upload config scan results
uses: github/codeql-action/upload-sarif@v3
uses: github/codeql-action/upload-sarif@v4
if: always()
with:
sarif_file: trivy-config.sarif