From d0baf2857d5ca9ba117bd84f3cffca15df05d563 Mon Sep 17 00:00:00 2001 From: gbikkiintel Date: Wed, 30 Oct 2024 18:56:56 -0500 Subject: [PATCH] Fixed trivy version --- .github/workflows/trivy.yml | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 524b03004e..40e3cafbfd 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -33,11 +33,18 @@ jobs: - name: Install Trivy run: | - curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sudo sh -s -- -b /usr/local/bin v0.55.0 + curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sudo sh -s -- -b /usr/local/bin - name: Run Trivy code vulnerability scanner (JSON Output) run: | - trivy --quiet fs --format json --output trivy-code-results.json --ignore-unfixed --vuln-type os,library --severity CRITICAL,HIGH,MEDIUM,LOW . + trivy --quiet fs \ + --format json \ + --output trivy-code-results.json \ + --ignore-unfixed \ + --vuln-type os,library \ + --severity CRITICAL,HIGH,MEDIUM,LOW \ + --db-repository 'ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db' \ + . - name: Upload Code Vulnerability Scan Results uses: actions/upload-artifact@v3 @@ -70,7 +77,7 @@ jobs: --ignore-unfixed \ --vuln-type os,library \ --severity CRITICAL,HIGH,MEDIUM,LOW \ - --db-repository ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db \ + --db-repository 'ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db' \ . - name: Upload Code Vulnerability Scan Results