diff --git a/.github/workflows/trivy-analysis.yml b/.github/workflows/trivy-analysis.yml index a0305d3e..44a6fe7f 100644 --- a/.github/workflows/trivy-analysis.yml +++ b/.github/workflows/trivy-analysis.yml @@ -33,7 +33,7 @@ jobs: DOCKER_BUILDKIT=1 docker build -t cloudharness-base:${{ github.sha }} . -f ./infrastructure/base-images/cloudharness-base/Dockerfile - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@2a2157eb22c08c9a1fac99263430307b8d1bc7a2 + uses: aquasecurity/trivy-action@master with: image-ref: 'cloudharness-base:${{ github.sha }}' format: 'sarif'