From 6592efffe2abdaa55b41b1e9966d3b2420afff9d Mon Sep 17 00:00:00 2001 From: Sebastian Serth Date: Thu, 11 Nov 2021 01:29:11 +0100 Subject: [PATCH 1/2] Checkout code for trivy analysis --- .github/workflows/ci.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d2c5102..787c2ea 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -75,6 +75,8 @@ jobs: runs-on: ubuntu-latest needs: [ compile ] steps: + - name: Checkout code + uses: actions/checkout@v2 - name: Run Trivy vulnerability scanner in repo mode uses: aquasecurity/trivy-action@master with: From fef7d951d248a5795ba96f3a265f4eb4cdad2d93 Mon Sep 17 00:00:00 2001 From: Sebastian Serth Date: Thu, 11 Nov 2021 12:12:56 +0100 Subject: [PATCH 2/2] Do not return exit code 1 in case of trivy results --- .github/workflows/ci.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 787c2ea..bf671d5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -85,7 +85,6 @@ jobs: template: '@/contrib/sarif.tpl' output: 'trivy-results.sarif' severity: 'HIGH,CRITICAL' - exit-code: '1' - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v1 with: