diff --git a/.github/workflows/test-generated-project.yml b/.github/workflows/test-generated-project.yml index 812dcf2a..a28fdca9 100644 --- a/.github/workflows/test-generated-project.yml +++ b/.github/workflows/test-generated-project.yml @@ -46,5 +46,13 @@ jobs: run: terraform fmt -recursive -check - name: Run trivy linter - run: ls -l && trivy fs --scanners vuln,secret,misconfig --exit-code 1 ./aws-advanced-test - continue-on-error: false + uses: aquasecurity/trivy-action@master + with: + scan-type: 'fs' + ignore-unfixed: true + exit-code: '1' + severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL' + scan-ref: './aws-advanced-test' + + # run: ls -l && trivy fs --scanners vuln,secret,misconfig --exit-code 1 ./aws-advanced-test + # continue-on-error: false