Merge pull request #56 from catenax-ng/main

Kicks Scan Fix
eclipse-tractusx · Nov 28, 2023 · c90d266 · c90d266
2 parents 78b08f5 + ec7e4de
commit c90d266
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 5 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -34,15 +34,13 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.14.0
         with:
           scan-type: "config"
-          # ignore-unfixed: true
-          exit-code: "1"
           hide-progress: false
           format: "sarif"
           output: "trivy-results1.sarif"
-          severity: "CRITICAL,HIGH"
+          vuln-type: "os,library"
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v2

diff --git a/Dockerfile b/Dockerfile
@@ -22,7 +22,7 @@ FROM maven:3.8-openjdk-18 as maven
 
 COPY ./pom.xml /pom.xml
 COPY ./src ./src
-COPY LICENSE NOTICE.md DEPENDENCIES SECURITY.md /app
+COPY LICENSE NOTICE.md DEPENDENCIES SECURITY.md /app/
 
 RUN mvn clean package -DskipTests