Hopefully fix GHA sarif upload

This commit is contained in:
Till Faelligen 2022-11-03 08:20:51 +01:00
parent 4afadebd99
commit f5b11e30a4
No known key found for this signature in database
GPG Key ID: ACCDC9606D472758

View File

@ -24,6 +24,7 @@ jobs:
permissions: permissions:
contents: read contents: read
packages: write packages: write
security-events: write # To upload Trivy sarif files
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v3 uses: actions/checkout@v3
@ -75,7 +76,7 @@ jobs:
output: "trivy-results.sarif" output: "trivy-results.sarif"
- name: Upload Trivy scan results to GitHub Security tab - name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: "trivy-results.sarif" sarif_file: "trivy-results.sarif"
@ -103,6 +104,7 @@ jobs:
permissions: permissions:
contents: read contents: read
packages: write packages: write
security-events: write # To upload Trivy sarif files
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v3 uses: actions/checkout@v3
@ -154,7 +156,7 @@ jobs:
output: "trivy-results.sarif" output: "trivy-results.sarif"
- name: Upload Trivy scan results to GitHub Security tab - name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: "trivy-results.sarif" sarif_file: "trivy-results.sarif"