From a5cea97d99f8ed7790a5f2898f1424389437fd57 Mon Sep 17 00:00:00 2001 From: Shourouni <317198@NTTDATA.COM> Date: Tue, 20 Jun 2023 11:16:14 -0700 Subject: [PATCH] replacing trivy scan job --- .github/workflows/dev-email-worker.yml | 18 +++--------------- 1 file changed, 3 insertions(+), 15 deletions(-) diff --git a/.github/workflows/dev-email-worker.yml b/.github/workflows/dev-email-worker.yml index 46ae5126..f48bd45a 100644 --- a/.github/workflows/dev-email-worker.yml +++ b/.github/workflows/dev-email-worker.yml @@ -74,19 +74,7 @@ jobs: #Run Vulnerability Scan usinig Trivy scanner - name: Run Trivy vulnerability scanner for dev-email-worker - uses: aquasecurity/trivy-action@master + uses: bcgov/pipeline-templates/.github/workflows/trivy-container.yaml@main with: - scan-type: image - image-ref: "dev-email-worker:${{ needs.app-version.outputs.app-version }}" - format: sarif - output: trivy-results.sarif - exit-code: 1 - ignore-unfixed: true - severity: HIGH,CRITICAL - - #Upload results to the Github security tab. - - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v2 - if: always() - with: - sarif_file: trivy-results.sarif \ No newline at end of file + IMAGE: dev-email-worker + TAG: latest \ No newline at end of file