diff --git a/.github/workflows/trivy-artifact-scan.yaml b/.github/workflows/trivy-artifact-scan.yaml index 916204627..0b59b7da4 100644 --- a/.github/workflows/trivy-artifact-scan.yaml +++ b/.github/workflows/trivy-artifact-scan.yaml @@ -1,17 +1,17 @@ name: Trivy Artifact Scanning on: - # push: - # branches: [ master ] - # paths: - # - "plural/**" - # - ".github/workflows/trivy-artifact-scan.yaml" - # pull_request: - # branches: [ master ] - # paths: - # - "plural/**" - # - ".github/workflows/trivy-artifact-scan.yaml" - # schedule: - # - cron: '0 0 * * 1' + push: + branches: [ master ] + paths: + - "plural/**" + - ".github/workflows/trivy-artifact-scan.yaml" + pull_request: + branches: [ master ] + paths: + - "plural/**" + - ".github/workflows/trivy-artifact-scan.yaml" + schedule: + - cron: '0 0 * * 1' workflow_dispatch: jobs: trivy-scan: @@ -28,7 +28,7 @@ jobs: uses: aquasecurity/trivy-action@master with: scan-type: 'fs' - scan-ref: 'plural' + skip-dirs: '.github,.stoat,apps,bin,config,rel,testdata,www' hide-progress: false format: 'sarif' output: 'trivy-results.sarif'