Skip to content

Commit 7c0a26b

Browse files
authored
Merge branch 'master' into downgrade-azure
2 parents 30c158c + 9f15a79 commit 7c0a26b

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

.github/workflows/vulnerability-scan.yml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@ name: Vulnerability Scan
22

33
on:
44
schedule:
5-
# Run once every day
6-
- cron: '0 0 * * *'
5+
# Run every third day
6+
- cron: 0 0 * * */3
77

88
jobs:
99
scan:
@@ -35,10 +35,11 @@ jobs:
3535
echo "::set-env name=IMAGE_WITH_POETRY_LOCK::$IMAGE_NAME"
3636
3737
- name: Scan image 🕵️‍♀️🕵️‍♂️
38-
uses: homoluctus/gitrivy@v2.0.0
38+
uses: wochinge/gitrivy@6bf026b
3939
with:
4040
# Needs the token so it can create an issue once a vulnerability was found
4141
token: ${{ secrets.GITHUB_TOKEN }}
4242
image: ${{ env.IMAGE_WITH_POETRY_LOCK }}
4343
ignore_unfixed: true
4444
issue_label: "tool:trivy,type:vulnerability"
45+
fail_on_vulnerabilities: true

0 commit comments

Comments
 (0)