We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b5a56bc commit 8e05bedCopy full SHA for 8e05bed
.github/workflows/ci.yml
@@ -420,6 +420,7 @@ jobs:
420
uses: actions/download-artifact@v4
421
with:
422
name: docker-image-all-extensions-${{ needs.docker_build_setup.outputs.version }}
423
+
424
- name: Scan image with Trivy
425
uses: aquasecurity/trivy-action@master
426
@@ -428,8 +429,10 @@ jobs:
428
429
output: 'trivy-results-docker.sarif'
430
ignore-unfixed: true
431
env:
- # See https://github.com/aquasecurity/trivy-action/issues/389#issuecomment-2368662097
432
- ACTIONS_RUNTIME_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+ # Uses the cache from trivy.yml workflow
433
+ TRIVY_SKIP_DB_UPDATE: true
434
+ TRIVY_SKIP_JAVA_DB_UPDATE: true
435
436
- name: Upload results to GH Security tab
437
uses: github/codeql-action/upload-sarif@v3
438
0 commit comments