Merge pull request #409 from netscaler/update-trivy

trivy workflow to fail when found vulnerabilities and upload sarif file
netscaler · Apr 12, 2024 · 91d443d · 91d443d
2 parents 2f48082 + f46636a
commit 91d443d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -17,11 +17,13 @@ jobs:
         with:
           scan-type: "fs"
           ignore-unfixed: true
+          exit-code: '1'
           format: "sarif"
           output: "trivy-results.sarif"
           severity: "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL"
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
+        if: always()
         with:
           sarif_file: "trivy-results.sarif"