diff --git a/.github/workflows/trivvy.yml b/.github/workflows/trivvy.yml index 325697e5..97436b47 100644 --- a/.github/workflows/trivvy.yml +++ b/.github/workflows/trivvy.yml @@ -19,4 +19,31 @@ jobs: exit-code: '1' ignore-unfixed: true vuln-type: 'os,library' + severity: 'CRITICAL,HIGH' + - name: Run Trivy vulnerability scanner on wis2box-api + uses: aquasecurity/trivy-action@0.20.0 + with: + image-ref: 'ghcr.io/wmo-im/wis2box-api:latest' + format: 'table' + exit-code: '1' + ignore-unfixed: true + vuln-type: 'os,library' + severity: 'CRITICAL,HIGH' + - name: Run Trivy vulnerability scanner on wis2box-webapp + uses: aquasecurity/trivy-action@0.20.0 + with: + image-ref: 'ghcr.io/wmo-im/wis2box-webapp:latest' + format: 'table' + exit-code: '1' + ignore-unfixed: true + vuln-type: 'os,library' + severity: 'CRITICAL,HIGH' + - name: Run Trivy vulnerability scanner on wis2box-ui + uses: aquasecurity/trivy-action@0.20.0 + with: + image-ref: 'ghcr.io/wmo-im/wis2box-ui:latest' + format: 'table' + exit-code: '1' + ignore-unfixed: true + vuln-type: 'os,library' severity: 'CRITICAL,HIGH' \ No newline at end of file