diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml deleted file mode 100644 index 0483d36..0000000 --- a/.github/workflows/trivy.yml +++ /dev/null @@ -1,27 +0,0 @@ -name: trivy scan -on: - push: - branches: - - master -jobs: - build: - name: Build - runs-on: ubuntu-20.04 - steps: - - name: Checkout code - uses: actions/checkout@v4 - - # https://github.com/aquasecurity/trivy-action - - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.28.0 - with: - scan-type: "fs" - format: "sarif" - output: "trivy-results.sarif" - scanners: "vuln,secret,misconfig" - severity: "CRITICAL,HIGH" - - - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: "trivy-results.sarif"