test

benjaminjb · Jan 20, 2023 · e3a2b9e · e3a2b9e
1 parent a76f02a
commit e3a2b9e
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/.github/workflows/trivy-scan.yaml b/.github/workflows/trivy-scan.yaml
@@ -15,13 +15,23 @@ on:
 
 jobs:
   scan:
+    permissions:
+      # contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
     runs-on: ubuntu-latest
 
-    if: ${{ github.repository == 'CrunchyData/postgres-operator' }}
+    #if: ${{ github.repository == 'CrunchyData/postgres-operator' }}
 
     steps:
       - uses: actions/checkout@v3
 
+      - name: Log all detected vulnerabilities
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: fs
+          hide-progress: true
+          # exit-code: 1
+
       # Upload actionable results to the GitHub Security tab.
       # Pull request checks fail according to repository settings.
       #
@@ -35,7 +45,6 @@ jobs:
           format: 'sarif'
           output: 'trivy-results.sarif'
           hide-progress: true
-          exit-code: 1
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v2