ci: replace trivy github action with docker-based scan
CI Pipeline / HTML Lint (push) Successful in 7s
Deploy QA / Build and Push (push) Successful in 15s
CI Pipeline / Build Docker Image (push) Successful in 56s
Deploy QA / Deploy to QA (push) Failing after 2s
CI Pipeline / Security Scan (push) Failing after 24s
Deploy QA / Notification (push) Failing after 2s
CI Pipeline / Generate Summary (push) Failing after 1s

This commit is contained in:
2026-06-01 22:08:29 -06:00
parent 4e5d4ef5cb
commit 14dba2c7e8
+5 -7
View File
@@ -76,13 +76,11 @@ jobs:
needs: build
steps:
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: ci-image:latest
format: table
exit-code: 1
severity: HIGH,CRITICAL
ignore-unfixed: true
run: |
docker run --rm \
-v /var/run/docker.sock:/var/run/docker.sock \
aquasec/trivy:latest \
image --severity HIGH,CRITICAL --exit-code 1 --ignore-unfixed ci-image:latest
summary:
name: Generate Summary