diff --git a/.gitea/workflows/security-scan.yaml b/.gitea/workflows/security-scan.yaml index 058bd9d..2084812 100644 --- a/.gitea/workflows/security-scan.yaml +++ b/.gitea/workflows/security-scan.yaml @@ -19,16 +19,26 @@ jobs: - name: Checkout Repository uses: actions/checkout@v7 + - name: Install Trivy + env: + TRIVY_VERSION: "0.70.0" + run: | + curl -fsSL -o trivy.tar.gz \ + "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" + tar -xzf trivy.tar.gz trivy + chmod +x trivy + sudo mv trivy /usr/local/bin/trivy + rm -f trivy.tar.gz + - name: Run Trivy Scanner - uses: aquasecurity/trivy-action@v0.36.0 - with: - scan-type: fs - scan-ref: . - scanners: vuln,secret,misconfig - severity: CRITICAL,HIGH - format: json - output: trivy-results.json - exit-code: "0" + run: | + trivy fs \ + --scanners vuln,secret,misconfig \ + --severity CRITICAL,HIGH \ + --format json \ + --output trivy-results.json \ + --exit-code 0 \ + . - name: Install OSV-Scanner run: |