Also log to console.

ukwa · Nov 16, 2023 · 501626b · 501626b
1 parent b84abb7
commit 501626b
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/.github/workflows/run-trivy.yml b/.github/workflows/run-trivy.yml
@@ -18,6 +18,16 @@ jobs:
         run: |
           docker build -t docker.io/my-organization/my-app:${{ github.sha }} .
 
+      - name: Run Trivy vulnerability scanner to console
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}'
+          format: 'table'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+          severity: 'CRITICAL,HIGH'
+          timeout: '30m'
+
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
@@ -27,7 +37,7 @@ jobs:
           exit-code: '1'
           ignore-unfixed: true
           vuln-type: 'os,library'
-          severity: 'HIGH,CRITICAL'
+          severity: 'CRITICAL,HIGH'
           timeout: '30m'
 
       - name: Upload Trivy scan results to GitHub Security tab