We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 111482c commit fa23cfcCopy full SHA for fa23cfc
2 files changed
.github/actions/trivy_security_scan/action.yml
@@ -1,9 +1,14 @@
1
name: 'Trivy Security Scan'
2
3
runs:
4
- using: "composite"
+
5
steps:
6
-
+ - name: Checkout Repo
7
+ uses: actions/checkout@v4
8
+ with:
9
+ fetch-depth: 0
10
+ ref: ${{ github.event.pull_request.head.ref }}
11
12
# Generate CycloneDX SBOM and License Scan
13
- name: Generate CycloneDX SBOM with Anchore Syft
14
shell: bash
.github/workflows/trivy.yml
@@ -1,6 +1,7 @@
name: Trivy Test Run
on:
+ push:
workflow_dispatch:
inputs:
DEPLOY_BRANCH:
@@ -10,8 +11,12 @@ on:
jobs:
scan:
runs-on: [self-hosted, "centos8"]
+ timeout-minutes: 30
15
env:
16
DEPLOY_BRANCH : ${{github.ref_name}}
17
+ outputs:
18
+ git_branch: ${{ env.GIT_BRANCH }}
19
20
21
- name: Run Trivy Security Scan
22
uses: ./.github/actions/trivy_security_scan
0 commit comments