diff --git a/.github/workflows/trivy-analysis.yml b/.github/workflows/trivy-analysis.yml index f9a8a2396..e68260d97 100644 --- a/.github/workflows/trivy-analysis.yml +++ b/.github/workflows/trivy-analysis.yml @@ -17,7 +17,7 @@ jobs: with: format: "sarif" output: "trivy-dotnet-results.sarif" - scan-type: "repo" + scan-type: "fs" scan-ref: "./CSETWebApi" severity: "CRITICAL,HIGH" @@ -37,14 +37,14 @@ jobs: - name: Run vulnerability scanner uses: aquasecurity/trivy-action@0.24.0 with: - # format: "sarif" - # output: "trivy-nodejs-results.sarif" - scan-type: "repo" + format: "sarif" + output: "trivy-nodejs-results.sarif" + scan-type: "fs" scan-ref: "./CSETWebNg" severity: "CRITICAL,HIGH" - # - name: Upload scan results to Security tab - # uses: github/codeql-action/upload-sarif@v3 - # with: - # category: "Node.js" - # sarif_file: "trivy-nodejs-results.sarif" + - name: Upload scan results to Security tab + uses: github/codeql-action/upload-sarif@v3 + with: + category: "Node.js" + sarif_file: "trivy-nodejs-results.sarif"