trivy

MorpheusAIs · Oct 8, 2024 · a654fdc · a654fdc
1 parent 52313cc
commit a654fdc
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/.github/workflows/security_scan.yml b/.github/workflows/security_scan.yml
@@ -31,17 +31,15 @@ jobs:
       run: bandit -r . -f custom
 
     - name: Run Trivy vulnerability scanner in repo mode
-      uses: aquasecurity/trivy-action@master
+      uses: aquasecurity/trivy-action@0.20.0
       with:
         scan-type: 'fs'
         ignore-unfixed: true
         format: 'sarif'
         output: 'trivy-results.sarif'
-        severity: 'CRITICAL,HIGH'
+        severity: 'CRITICAL'
 
     - name: Upload Trivy scan results to GitHub Security tab
       uses: github/codeql-action/upload-sarif@v3
-      if: always()
       with:
         sarif_file: 'trivy-results.sarif'
-        wait-for-processing: true