From ec7e4de514d213b649d3c18f737288919202d1eb Mon Sep 17 00:00:00 2001 From: "fabio.d.mota" Date: Mon, 27 Nov 2023 09:56:56 +0000 Subject: [PATCH] fix(Backend): Fix kicks scan on "When a COPY command has more than two arguments, the last one should end with a slash" --- .github/workflows/trivy.yml | 6 ++---- Dockerfile | 2 +- 2 files changed, 3 insertions(+), 5 deletions(-) diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index f244627..db1b3b9 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -34,15 +34,13 @@ jobs: uses: actions/checkout@v3 - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@master + uses: aquasecurity/trivy-action@0.14.0 with: scan-type: "config" - # ignore-unfixed: true - exit-code: "1" hide-progress: false format: "sarif" output: "trivy-results1.sarif" - severity: "CRITICAL,HIGH" + vuln-type: "os,library" - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v2 diff --git a/Dockerfile b/Dockerfile index 79ea80e..94f6299 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,7 +22,7 @@ FROM maven:3.8-openjdk-18 as maven COPY ./pom.xml /pom.xml COPY ./src ./src -COPY LICENSE NOTICE.md DEPENDENCIES SECURITY.md /app +COPY LICENSE NOTICE.md DEPENDENCIES SECURITY.md /app/ RUN mvn clean package -DskipTests