This commit is contained in:
simonfelding 2026-05-08 13:16:59 -05:00 committed by GitHub
commit 564ef175a2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 118 additions and 74 deletions

View file

@ -57,14 +57,14 @@ jobs:
outputs: type=image,"name=${{ env.DOCKER_REPO_DEV }}",push-by-digest=false,name-canonical=true,push=true
context: ./build
file: ./build/Dockerfile
tags: "${{ env.DOCKER_REPO_DEV }}:dev-${{ github.ref_name }}"
tags: "${{ env.DOCKER_REPO_DEV }}:dev-${{ github.sha }}"
build-args: |
version=${{ env.version }}
- name: Run Trivy vulnerability scan
uses: aquasecurity/trivy-action@0.30.0
with:
image-ref: "${{ env.DOCKER_REPO_DEV }}:dev-${{ github.ref_name }}"
image-ref: "${{ env.DOCKER_REPO_DEV }}:dev-${{ github.sha }}"
format: 'sarif'
exit-code: 0
severity: 'CRITICAL,HIGH'