Skip to content

Commit 8d17c2f

Browse files
Update oss_pygoat-devsecops-basic.yml
1 parent 4605dc5 commit 8d17c2f

1 file changed

Lines changed: 8 additions & 1 deletion

File tree

.github/workflows/oss_pygoat-devsecops-basic.yml

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -138,6 +138,13 @@ jobs:
138138
- name: Push Docker image ${{ env.image }}:latest
139139
if: env.pushDockerImage == 'true'
140140
run: docker push ${{ env.image }}:latest
141+
- name: Aqua Security Trivy
142+
# You may pin to the exact commit or the version.
143+
# uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2
144+
uses: aquasecurity/trivy-action@0.21.0
145+
with:
146+
# image reference(for backward compatibility)
147+
image-ref: ${{ env.image }}:latest
141148
devsecops-tasks:
142149
name: Do DevSecOps Tasks
143150
needs:
@@ -175,7 +182,7 @@ jobs:
175182
- name: Upload results to Security tab
176183
uses: github/codeql-action/upload-sarif@v2
177184
with:
178-
sarif_file: ${{ steps.msdo.outputs.sarifFile }}
185+
sarif_file: ${{ steps.msdo.outputs.sarifFile }}
179186
test-run_devopsshield_scan_linux:
180187
name: Run DevOps Shield Scan Linux
181188
needs:

0 commit comments

Comments
 (0)