ci: upload trivy scan results to GitHub Security tab

Signed-off-by: zhzhuang-zju <m17799853869@163.com>
zhzhuang-zju · Oct 18, 2023 · 67af072 · 67af072
1 parent 557348f
commit 67af072
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/ci-image-scanning.yaml b/.github/workflows/ci-image-scanning.yaml
@@ -33,7 +33,11 @@ jobs:
         uses: aquasecurity/trivy-action@0.12.0
         with:
           image-ref: 'docker.io/karmada/${{ matrix.target }}:latest'
-          format: 'table'
+          format: 'sarif'
           ignore-unfixed: true
           vuln-type: 'os,library'
-          exit-code: '1'
+          output: 'trivy-results.sarif'
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'