Skip to content
This repository has been archived by the owner on Jul 18, 2024. It is now read-only.

Commit

Permalink
fix(Backend): Fix kicks scan on "When a COPY command has more than tw…
Browse files Browse the repository at this point in the history
…o arguments, the last one should end with a slash"
  • Loading branch information
fabiodmota committed Nov 27, 2023
1 parent 78b08f5 commit ec7e4de
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 5 deletions.
6 changes: 2 additions & 4 deletions .github/workflows/trivy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,15 +34,13 @@ jobs:
uses: actions/checkout@v3

- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@master
uses: aquasecurity/trivy-action@0.14.0
with:
scan-type: "config"
# ignore-unfixed: true
exit-code: "1"
hide-progress: false
format: "sarif"
output: "trivy-results1.sarif"
severity: "CRITICAL,HIGH"
vuln-type: "os,library"

- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ FROM maven:3.8-openjdk-18 as maven

COPY ./pom.xml /pom.xml
COPY ./src ./src
COPY LICENSE NOTICE.md DEPENDENCIES SECURITY.md /app
COPY LICENSE NOTICE.md DEPENDENCIES SECURITY.md /app/

RUN mvn clean package -DskipTests

Expand Down

0 comments on commit ec7e4de

Please sign in to comment.