diff --git a/.github/workflows/sub-build-docker-image.yml b/.github/workflows/sub-build-docker-image.yml index c1d8f7a4656..70a89a0d1cf 100644 --- a/.github/workflows/sub-build-docker-image.yml +++ b/.github/workflows/sub-build-docker-image.yml @@ -184,7 +184,6 @@ jobs: # For the latest built image, display: # - the vulnerabilities (ignoring the base image, and only displaying vulnerabilities with a critical or high security severity) - # - the available recommendations # - compare it to the latest image indexed in Docker Hub (only displaying changed packages and vulnerabilities that already have a fix) # # Record the image to Scout environment based on the event type, for example: @@ -198,7 +197,7 @@ jobs: # and are commonly used for testing, and thus are ephemeral. if: ${{ inputs.dockerfile_target == 'runtime' }} with: - command: quickview,cves + command: cves,compare image: us-docker.pkg.dev/${{ vars.GCP_PROJECT }}/zebra/${{ inputs.image_name }}:${{ steps.meta.outputs.version }} to: zfnd/zebra:latest ignore-base: true