From bf71c1b839dc731b6f3c401cfce4b85518f3568f Mon Sep 17 00:00:00 2001 From: Danesh Kuruppu Date: Thu, 31 Oct 2024 10:04:53 +0530 Subject: [PATCH] revert back to the base configs --- .github/workflows/publish-release.yml | 16 ++++++---------- 1 file changed, 6 insertions(+), 10 deletions(-) diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index d1f5c55..cc436dc 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -27,17 +27,13 @@ jobs: - name: Create lib directory if not exists run: mkdir -p ballerina/lib - name: Run Trivy vulnerability scanner - env: - TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db - TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db - uses: aquasecurity/trivy-action@master + uses: aquasecurity/trivy-action@0.23.0 with: - scan-type: 'rootfs' - scan-ref: '${{ github.workspace.ballerina.lib }}/' - format: 'table' - timeout: '10m0s' - exit-code: '1' - scanners: "vuln" + scan-type: "rootfs" + scan-ref: "/github/workspace/ballerina/lib" + format: "table" + timeout: "10m0s" + exit-code: "1" - name: Set version env variable run: echo "VERSION=$((grep -w 'version' | cut -d= -f2) < gradle.properties | rev | cut --complement -d- -f1 | rev)" >> $GITHUB_ENV - name: Pre release dependency version update