individual scans

Author: anthony-nhs

.github/workflows/quality-checks.yml

@@ -173,12 +173,12 @@ jobs:
           pkg:
             include-dev-deps: true
           EOF
-      - name: Check licenses
+      - name: Check python licenses
         uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
         if: ${{ steps.check_languages.outputs.uses_poetry == 'true' }}
         with:
           scan-type: "fs"
-          scan-ref: "."
+          scan-ref: "poetry.lock"
           severity: "CRITICAL,HIGH"
           scanners: "license"
           format: "table"

trivy.yaml

@@ -0,0 +1,2 @@
+pkg:
+  include-dev-deps: true