Merge pull request #4 from TerabyteTribune/fork-actions

do not run trivy in fork

Author: Morpheus636

.github/workflows/fork-build.yml

@@ -35,19 +35,19 @@ jobs:
           docker-compose -f docker-compose.test.yml up -d wordpress
           docker-compose -f docker-compose.test.yml run sut
 
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@master
-        with:
-          image-ref: "${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}"
-          format: "template"
-          template: "@/contrib/sarif.tpl"
-          output: "trivy-results.sarif"
-
-      - name: Upload Trivy scan results to GitHub Security tab
-        if: github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'schedule')
-        uses: github/codeql-action/upload-sarif@v1
-        with:
-          sarif_file: "trivy-results.sarif"
+#      - name: Run Trivy vulnerability scanner
+#        uses: aquasecurity/trivy-action@master
+#        with:
+#          image-ref: "${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}"
+#          format: "template"
+#          template: "@/contrib/sarif.tpl"
+#          output: "trivy-results.sarif"
+#
+#      - name: Upload Trivy scan results to GitHub Security tab
+#        if: github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'schedule')
+#        uses: github/codeql-action/upload-sarif@v1
+#        with:
+#          sarif_file: "trivy-results.sarif"
 
       - name: Login to Docker Hub
         if: (github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'schedule' )) || contains(github.ref, 'refs/tags/')