Skip to content

Commit

Permalink
update fix
Browse files Browse the repository at this point in the history
  • Loading branch information
Ryosuke Tomita committed Dec 16, 2023
1 parent 88caaf6 commit d657897
Showing 1 changed file with 20 additions and 20 deletions.
40 changes: 20 additions & 20 deletions .github/workflows/react-dependency-check.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,25 +9,25 @@ on:
jobs:

trivy-scan:
runs-on: ubuntu-latest
runs-on: ubuntu-latest

steps:
- name: clone application source code
uses: actions/checkout@v3
steps:
- name: clone application source code
uses: actions/checkout@v3

- name: use trivy
uses: aquasecurity/trivy-action@master
with:
scan-type: 'fs'
exit-code: 1
scanners: 'vuln'
vuln-type: 'library'
hide-progress: true
format: table
output: 'sca-report.sarif'
severity: CRITICAL,HIGH
scan-ref: '.'
- name: upload result
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'sca-report.sarif'
- name: use trivy
uses: aquasecurity/trivy-action@master
with:
scan-type: 'fs'
exit-code: 1
scanners: 'vuln'
vuln-type: 'library'
hide-progress: true
format: 'sarif'
output: 'sca-report.sarif'
severity: CRITICAL,HIGH
scan-ref: '.'
- name: upload result
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'sca-report.sarif'

0 comments on commit d657897

Please sign in to comment.