From b684f1e0fe5bb69b44cc2e3a387e30a0f4dc1e9f Mon Sep 17 00:00:00 2001 From: afwillia Date: Wed, 6 Mar 2024 10:46:30 -0800 Subject: [PATCH] Trivy image scan is case sensitive, set image path to lowercase --- .github/workflows/docker_build.yml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/docker_build.yml b/.github/workflows/docker_build.yml index 589db778..761ab291 100644 --- a/.github/workflows/docker_build.yml +++ b/.github/workflows/docker_build.yml @@ -54,13 +54,16 @@ jobs: build-args: | DCA_VERSION=${{ env.DCA_VERSION }} + - id: Lowercase image name for trivy + uses: ASzc/change-string-case-action@v6 + with: + string: ${{ env.IMAGE_PATH }} + - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@master with: - image-ref: '${{ env.IMAGE_PATH }}:${{ steps.meta.outputs.version }}' + image-ref: '${{ steps.string.outputs.lowercase }}:${{ steps.meta.outputs.version }}' format: 'table' exit-code: '1' ignore-unfixed: true severity: 'CRITICAL,HIGH' - github-pat: ${{ secrets.GITHUB_TOKEN }} -