more config

.github/workflows/build_and_publish.yaml

@@ -58,8 +58,14 @@ jobs:
       uses: aquasecurity/[email protected]
       with:
         image-ref: ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
-        format: 'table'
+        format: 'sarif'
+        output: 'trivy-results.sarif'
         exit-code: '0'
         ignore-unfixed: true
         vuln-type: 'os,library'
-        severity: 'CRITICAL,HIGH'
+        severity: 'CRITICAL,HIGH'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'

build.gradle

@@ -26,9 +26,10 @@ jib {
                 architecture = 'arm64'
                 os = 'linux'
             }
+            platform {
+                architecture = 'amd64'
+                os = 'linux'
+            }
         }
     }
-    to {
-        image = 'ghcr.io/shellz-n-stuff/slsa-spring-demo'
-    }
 }