diff options
| author |  Yong Tang <yong.tang.github@outlook.com>
| 2023-03-13 11:31:24 -0700 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2023-03-13 14:31:24 -0400 |
| commit | 1258e3b2f20a91d77eaf99874002d1aab99a7b60 (patch) | |
| tree | 89b1ffb14cb5dd184b07db2a46f26436c054b338 | |
| parent | 1c09052493ae080f444e3b65433176cf8e1da975 (diff) | |
| download | coredns-1258e3b2f20a91d77eaf99874002d1aab99a7b60.tar.gz coredns-1258e3b2f20a91d77eaf99874002d1aab99a7b60.tar.zst coredns-1258e3b2f20a91d77eaf99874002d1aab99a7b60.zip | |
Fix trivy scan (#5967)
This PR fixes trivy scan caused by recent change in upsteam
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
| -rw-r--r-- | .github/workflows/trivy-scan.yaml | 9 |
1 files changed, 4 insertions, 5 deletions
diff --git a/.github/workflows/trivy-scan.yaml b/.github/workflows/trivy-scan.yaml index 24ef176d0..65586d067 100644 --- a/.github/workflows/trivy-scan.yaml +++ b/.github/workflows/trivy-scan.yaml @@ -1,7 +1,7 @@ name: Trivy Nightly Scan on: schedule: - - cron: '0 2 * * 5' #Run at 2AM UTC on every Friday + - cron: '0 2 * * 5' # Run at 2AM UTC on every Friday permissions: read-all jobs: @@ -20,15 +20,14 @@ jobs: - name: Checkout code uses: actions/checkout@v3 - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@1f0aa582c8c8f5f7639610d6d38baddfea4fdcee # master + uses: aquasecurity/trivy-action@1f0aa582c8c8f5f7639610d6d38baddfea4fdcee # master with: image-ref: 'docker.io/coredns/coredns:${{ matrix.versions }}' severity: 'CRITICAL,HIGH' - format: 'template' - template: '@/contrib/sarif.tpl' + format: 'sarif' output: 'trivy-results.sarif' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@16964e90ba004cdf0cd845b866b5df21038b7723 # v2.2.6 + uses: github/codeql-action/upload-sarif@16964e90ba004cdf0cd845b866b5df21038b7723 # v2.2.6 with: sarif_file: 'trivy-results.sarif' |