Aktualisieren Sie die CI

betadots · Apr 19, 2024 · 35af6a4 · 35af6a4
1 parent 92d1d14
commit 35af6a4
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -42,18 +42,19 @@ jobs:
         with:
           push: false
           tags: |
-            ci/dummy:${{ github.sha }}
+            ci/dummy-${{ matrix.release }}:${{ github.sha }}
 
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
-          image-ref: ci/dummy:${{ github.sha }}
+          image-ref: ci/dummy-${{ matrix.release }}:${{ github.sha }}
           format: 'sarif'
           output: 'trivy-results-${{ matrix.release }}.sarif'
           severity: 'CRITICAL,HIGH'
+          limit-severities-for-sarif: true
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'trivy-results-${{ matrix.release }}.sarif'