From f65622e5fc7df0f6450e01863cd4dcd9f5e7212a Mon Sep 17 00:00:00 2001 From: Aneesh Atri Date: Fri, 15 Nov 2024 09:43:45 -0500 Subject: [PATCH] use github pat for trivy scan --- .github/workflows/release.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index ed4a4cfd77ca..bd5dcc161c31 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -64,6 +64,8 @@ jobs: severity: 'CRITICAL,HIGH' format: 'sarif' output: 'trivy-results-${{ matrix.platforms }}.sarif' + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: upload scan results uses: github/codeql-action/upload-sarif@956f09c2ef1926b580554b9014cfb8a51abf89dd # v2.16.6 with: