ci: upload trivy scan results to GitHub Security tab

Signed-off-by: zhzhuang-zju <m17799853869@163.com>
2023-10-18 15:57:56 +08:00 · 2023-10-18 15:57:56 +08:00 · 67af072709
parent 557348fea0
commit 67af072709
1 changed files with 6 additions and 2 deletions
--- a/.github/workflows/ci-image-scanning.yaml
+++ b/.github/workflows/ci-image-scanning.yaml
@ -33,7 +33,11 @@ jobs:
        uses: aquasecurity/trivy-action@0.12.0
        with:
          image-ref: 'docker.io/karmada/${{ matrix.target }}:latest'
-          format: 'table'
+          format: 'sarif'
          ignore-unfixed: true
          vuln-type: 'os,library'
-          exit-code: '1'
+          output: 'trivy-results.sarif'
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'