From b9266e7186bbb7f1a52a1a468e4270e3aa7790d0 Mon Sep 17 00:00:00 2001 From: Tommy Date: Fri, 6 Sep 2024 11:00:50 -0700 Subject: [PATCH] Scan the correct image Signed-off-by: Tommy --- .github/workflows/build-testing.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build-testing.yml b/.github/workflows/build-testing.yml index 528015d..4f33905 100644 --- a/.github/workflows/build-testing.yml +++ b/.github/workflows/build-testing.yml @@ -68,7 +68,7 @@ jobs: - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@master with: - image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:testing format: template template: '@/contrib/sarif.tpl' output: trivy-results.sarif @@ -93,11 +93,11 @@ jobs: uses: anchore/scan-action@v4 id: grype with: - image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:testing fail-build: false - name: Upload Grype scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3 with: sarif_file: ${{ steps.grype.outputs.sarif }} - category: grype \ No newline at end of file + category: grype