diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 92819da..69de0a6 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -54,7 +54,7 @@ jobs: sudo systemctl daemon-reload sudo systemctl restart docker cd ./ivsr_ffmpeg_plugin - ./build_docker.sh --enable_ov_patch false --ov_version 2023.2 + ./build_docker.sh --enable_ov_patch false - name: Check disk space run: df -h @@ -64,14 +64,17 @@ jobs: TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db with: - image-ref: 'ffmpeg_ivsr_sdk_ov2023.2' + scan-type: 'image' + image-ref: 'ffmpeg_ivsr_sdk_ov2022.3' #format: 'template' #template: '@/contrib/sarif.tpl' + security-checks: vuln + #cache: 'true' format: 'sarif' ignore-unfixed: true vuln-type: 'os,library' output: 'trivy-ivsr-results.sarif' - severity: 'CRITICAL,HIGH' + severity: 'CRITICAL' - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3