publish workflow: checkout repo during scan step to get trivyignore

NASA-AMMOS · Sep 5, 2024 · 935fb59 · 935fb59
1 parent e8f0625
commit 935fb59
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -147,6 +147,8 @@ jobs:
       fail-fast: false
     name: scan ${{ matrix.image }}
     steps:
+      - uses: actions/checkout@v4
+
       - name: Scan ${{ matrix.image }} for vulnerabilities
         uses: aquasecurity/[email protected]
         with: