We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 09423fb commit 9e87184Copy full SHA for 9e87184
.github/workflows/vulnerabilities.yml
@@ -22,7 +22,7 @@ jobs:
22
working-directory: .
23
steps:
24
- name: Checkout pygeoapi
25
- uses: actions/checkout@v4
+ uses: actions/checkout@master
26
- name: Scan vulnerabilities with trivy
27
uses: aquasecurity/trivy-action@master
28
with:
@@ -37,6 +37,9 @@ jobs:
37
docker buildx build -t ${{ github.repository }}:${{ github.sha }} --platform linux/amd64 --no-cache -f Dockerfile .
38
- name: Scan locally built Docker image for vulnerabilities with trivy
39
40
+ env:
41
+ TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
42
+ TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
43
44
scan-type: image
45
exit-code: 1
0 commit comments