Skip to content
This repository was archived by the owner on Jun 5, 2025. It is now read-only.

Commit c88573b

Browse files
author
Luke Hinds
authored
Update image-publish.yml
1 parent 28ed352 commit c88573b

File tree

1 file changed

+0
-9
lines changed

1 file changed

+0
-9
lines changed

.github/workflows/image-publish.yml

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -92,15 +92,6 @@ jobs:
9292
id: image-digest
9393
run: |
9494
echo "digest=$(docker inspect --format='{{index .RepoDigests 0}}' ghcr.io/${{ env.IMAGE_NAME }}:${{ steps.version-string.outputs.tag }})" >> "$GITHUB_OUTPUT"
95-
- name: Run Trivy vulnerability scanner
96-
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0
97-
with:
98-
image-ref: '${{ steps.image-digest.outputs.digest }}'
99-
format: 'table'
100-
exit-code: '1'
101-
ignore-unfixed: true
102-
vuln-type: 'os,library'
103-
severity: 'CRITICAL,HIGH'
10495
- name: Install cosign
10596
if: github.event_name != 'pull_request'
10697
uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0

0 commit comments

Comments
 (0)