Merge pull request #4174 from zhzhuang-zju/trivy

ci: image-scanning increases results display
This commit is contained in:
karmada-bot 2023-10-25 19:35:29 +08:00 committed by GitHub
commit 941e198b2e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 1 deletions

View File

@ -23,7 +23,7 @@ jobs:
- karmada-metrics-adapter
steps:
- name: checkout code
uses: actions/checkout@v2
uses: actions/checkout@v3
- name: Build an image from Dockerfile
run: |
export VERSION="latest"
@ -37,6 +37,13 @@ jobs:
ignore-unfixed: true
vuln-type: 'os,library'
output: 'trivy-results.sarif'
- name: display scan results
uses: aquasecurity/trivy-action@0.12.0
with:
image-ref: 'docker.io/karmada/${{ matrix.target }}:latest'
format: 'table'
ignore-unfixed: true
vuln-type: 'os,library'
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
with: