From 0c49e16df5e373a86e751d842f87bcf19f587f6d Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@rubenfiszel.com>
Date: Thu, 4 Apr 2024 01:55:20 +0200
Subject: [PATCH] chore verify image vulns

---
 .github/workflows/docker-scan.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker-scan.yml b/.github/workflows/docker-scan.yml
index b9edb8997e..304aa33f7c 100644
--- a/.github/workflows/docker-scan.yml
+++ b/.github/workflows/docker-scan.yml
@@ -1,4 +1,4 @@
-name: Verify image vulnerabilities
+name: Verify image with Snyk
 
 on:
   schedule:
@@ -15,6 +15,8 @@ jobs:
     permissions: write-all
 
     steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
@@ -23,6 +25,6 @@ jobs:
           output: "trivy-results.sarif"
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: "trivy-results.sarif"