fix(build): add short sha for trivy

cloudoperators · Sep 15, 2024 · ecbee32 · ecbee32
1 parent 5d2b429
commit ecbee32
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/docker-build.yaml b/.github/workflows/docker-build.yaml
@@ -62,11 +62,14 @@ jobs:
     needs: build
     runs-on: [ default ]
     steps:
+      - name: Set sha
+        id: vars
+        run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         if: success()
         with:
-          image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
+          image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.vars.outputs.sha_short }}
           ignore-unfixed: true
           format: 'sarif'
           output: 'trivy-results.sarif'