Skip to content

Commit 9b524a0

Browse files
committed
scans: scan repo with Trivy
1 parent cd38a56 commit 9b524a0

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

.github/workflows/scans.yml

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -83,11 +83,19 @@ jobs:
8383
output: main_container_trivy_report.txt
8484
skip-dirs: /workspace/simics
8585

86+
- name: Run Trivy vulnerability scanner on repo
87+
uses: aquasecurity/trivy-action@f9424c10c36e288d5fa79bd3dfd1aeb2d6eae808 # master
88+
with:
89+
scan-type: fs
90+
output: repo_scan_trivy_report.txt
91+
8692
- name: Upload Trivy Report
8793
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
8894
with:
89-
path: main_container_trivy_report.txt
90-
name: main_container_trivy_report
95+
path: |
96+
main_container_trivy_report.txt
97+
repo_scan_trivy_report.txt
98+
name: trivy_report
9199

92100
scan_x86_64_breakpoint_uefi_edk2_container:
93101
runs-on: ubuntu-latest

0 commit comments

Comments
 (0)