From 6c495f53ff4aafb0bcf5e939b0b2e36c985fab8b Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@rubenfiszel.com>
Date: Thu, 4 Apr 2024 02:28:49 +0200
Subject: [PATCH] chore verify image vulns

---
 .github/workflows/docker-scan.yml | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/docker-scan.yml b/.github/workflows/docker-scan.yml
index b3620c9e4c..10b1fa6f1e 100644
--- a/.github/workflows/docker-scan.yml
+++ b/.github/workflows/docker-scan.yml
@@ -24,11 +24,13 @@ jobs:
         uses: aquasecurity/trivy-action@master
         with:
           image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-ee:main
-          format: "table"
+          format: "sarif"
           # output: "trivy-results.sarif"
           severity: "CRITICAL,HIGH"
-
-      # - name: Upload Trivy scan results to GitHub Security tab
-      #   uses: github/codeql-action/upload-sarif@v3
-      #   with:
-      #     sarif_file: "trivy-results.sarif"
+          scanners: "vuln"
+          limit-severities-for-sarif: true
+          output: "trivy-results.sarif"
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: "trivy-results.sarif"