fix github ci a bit

This commit is contained in:
Graham McIntire 2025-07-09 17:03:02 -05:00
parent 3286b6852b
commit 20d6e3fc16
No known key found for this signature in database

View file

@ -97,12 +97,15 @@ jobs:
- name: Run Docker Scout vulnerability scan - name: Run Docker Scout vulnerability scan
uses: docker/scout-action@v1 uses: docker/scout-action@v1
continue-on-error: true
with: with:
command: quickview,cves command: cves
image: aprsme:${{ github.sha }} image: aprsme:${{ github.sha }}
output-format: sarif format: sarif
only-severities: critical,high only-severities: critical,high
sarif-file: scout-results.sarif sarif-file: scout-results.sarif
dockerhub-user: ${{ secrets.DOCKERHUB_USERNAME }}
dockerhub-password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Upload Docker Scout results - name: Upload Docker Scout results
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
@ -110,6 +113,7 @@ jobs:
with: with:
name: docker-scout-report name: docker-scout-report
path: scout-results.sarif path: scout-results.sarif
if-no-files-found: ignore
retention-days: 7 retention-days: 7
- name: Generate security report summary - name: Generate security report summary