We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 30c158c + 9f15a79 commit 7c0a26bCopy full SHA for 7c0a26b
.github/workflows/vulnerability-scan.yml
@@ -2,8 +2,8 @@ name: Vulnerability Scan
2
3
on:
4
schedule:
5
- # Run once every day
6
- - cron: '0 0 * * *'
+ # Run every third day
+ - cron: 0 0 * * */3
7
8
jobs:
9
scan:
@@ -35,10 +35,11 @@ jobs:
35
echo "::set-env name=IMAGE_WITH_POETRY_LOCK::$IMAGE_NAME"
36
37
- name: Scan image 🕵️♀️🕵️♂️
38
- uses: homoluctus/gitrivy@v2.0.0
+ uses: wochinge/gitrivy@6bf026b
39
with:
40
# Needs the token so it can create an issue once a vulnerability was found
41
token: ${{ secrets.GITHUB_TOKEN }}
42
image: ${{ env.IMAGE_WITH_POETRY_LOCK }}
43
ignore_unfixed: true
44
issue_label: "tool:trivy,type:vulnerability"
45
+ fail_on_vulnerabilities: true
0 commit comments