Skip to content

Commit e4aa042

Browse files
Update trivy.yml
1 parent cdf43f6 commit e4aa042

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

.github/workflows/trivy.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ on:
1616

1717
permissions:
1818
contents: read
19+
security-events: write
1920

2021
jobs:
2122
build:
@@ -38,12 +39,11 @@ jobs:
3839
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0
3940
with:
4041
image-ref: '${{ secrets.DOCKER_HUB_USERNAME }}/${{ secrets.DOCKER_HUB_REPOSITORY }}:${{ github.sha }}'
41-
format: 'template'
42-
template: '@/contrib/sarif.tpl'
42+
format: 'sarif'
4343
output: 'trivy-results.sarif'
4444
severity: 'CRITICAL,HIGH'
4545

4646
- name: Upload Trivy scan results to GitHub Security tab
4747
uses: github/codeql-action/upload-sarif@v3
4848
with:
49-
sarif_file: 'trivy-results.sarif'
49+
sarif_file: 'trivy-results.sarif'

0 commit comments

Comments
 (0)