Skip to content

Commit f78ac6f

Browse files
committed
fixup
1 parent 9601360 commit f78ac6f

File tree

1 file changed

+25
-4
lines changed

1 file changed

+25
-4
lines changed

.github/workflows/trivy-docker.yaml

+25-4
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,28 @@
11
name: Trivy Nightly Docker Scan
22

33
on:
4-
# TODO@jsjoeio do some nightly check
4+
# Run scans if the workflow is modified, in order to test the
5+
# workflow itself. This results in some spurious notifications,
6+
# but seems okay for testing.
7+
pull_request:
8+
branches:
9+
- main
10+
paths:
11+
- .github/workflows/trivy-docker.yaml
12+
13+
# Run scans against master whenever changes are merged.
14+
push:
15+
branches:
16+
- main
17+
paths:
18+
- .github/workflows/trivy-docker.yaml
19+
20+
schedule:
21+
# Run at 10:15 am UTC (3:15am PT/5:15am CT)
22+
# Run at 0 minutes 0 hours of every day.
23+
- cron: "15 10 * * *"
24+
25+
workflow_dispatch:
526

627
permissions:
728
actions: none
@@ -30,13 +51,13 @@ jobs:
3051
- name: Run Trivy vulnerability scanner in image mode
3152
uses: aquasecurity/trivy-action@296212627a1e693efa09c00adc3e03b2ba8edf18
3253
with:
33-
image-ref: 'docker.io/codercom/code-server:latest
54+
image-ref: "docker.io/codercom/code-server:latest"
3455
ignore-unfixed: true
35-
format: 'sarif'
56+
format: "sarif"
3657
output: "trivy-image-results.sarif"
3758
severity: "HIGH,CRITICAL"
3859

3960
- name: Upload Trivy scan results to GitHub Security tab
4061
uses: github/codeql-action/upload-sarif@v1
4162
with:
42-
sarif_file: "trivy-image-results.sarif"
63+
sarif_file: "trivy-image-results.sarif"

0 commit comments

Comments
 (0)