diff --git a/.github/workflows/image-vulnability.yml b/.github/workflows/image-vulnability.yml index ddd88af..64aa438 100644 --- a/.github/workflows/image-vulnability.yml +++ b/.github/workflows/image-vulnability.yml @@ -8,8 +8,10 @@ jobs: - name: Build the Docker image run: docker build . --file Dockerfile --tag local/aria-ui:latest - name: Scan image - uses: anchore/scan-action@v1 + uses: anchore/scan-action@v2 with: image-reference: "local/aria-ui:latest" fail-build: true severity-cutoff: high + - name: grype scan JSON results + run: for j in `ls ./anchore-reports/*.json`; do echo "---- ${j} ----"; cat ${j}; echo; done