diff --git a/.github/workflows/docker-scan.yml b/.github/workflows/docker-scan.yml index b9edb8997e..304aa33f7c 100644 --- a/.github/workflows/docker-scan.yml +++ b/.github/workflows/docker-scan.yml @@ -1,4 +1,4 @@ -name: Verify image vulnerabilities +name: Verify image with Snyk on: schedule: @@ -15,6 +15,8 @@ jobs: permissions: write-all steps: + - name: Checkout code + uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@master with: @@ -23,6 +25,6 @@ jobs: output: "trivy-results.sarif" - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v2 with: sarif_file: "trivy-results.sarif"