Skip to content
Run Trivy vulnerability scanner

change errors to be cast to strings instead of just using assertions #16

Sign in to view logs

change errors to be cast to strings instead of just using assertions

change errors to be cast to strings instead of just using assertions #16

Workflow file for this run

.github/workflows/trivy.yml at 7f40e6c
name: Run Trivy vulnerability scanner
on: [ push ]
jobs:
main:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Build wis2box-ui
run: |
docker build -t wis2box-ui:test .
- name: Run Trivy vulnerability scanner on wis2box-ui
uses: aquasecurity/[email protected]
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
with:
image-ref: 'wis2box-ui:test'
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'
ignorefile: '.trivyignore'