diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 9c5911e..84f6471 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -26,7 +26,7 @@ jobs: uses: ./.github/actions/setup-tools - name: Build and Push - uses: egose/actions/docker-build-push@a18ce5484959fe604bf4c29726334e54933d1ba9 + uses: egose/actions/docker-build-push@04925c12e8e754a7951ebc1f20f7762595011d5d with: registry-url: ${{ env.DOCKER_REGISTRY }} registry-username: ${{ github.actor }} @@ -36,24 +36,4 @@ jobs: type=semver,pattern={{version}} type=semver,pattern={{major}}.{{minor}} type=semver,pattern={{major}} - - - name: Run Snyk to check Docker image for vulnerabilities - continue-on-error: true - uses: snyk/actions/docker@cdb760004ba9ea4d525f2e043745dfe85bb9077e - env: - SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - with: - image: ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }} - args: --file=Dockerfile - - - name: Upload result to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: snyk.sarif - - - name: Upload result to Artifact - uses: actions/upload-artifact@v4 - with: - name: snyk.sarif - path: snyk.sarif - retention-days: 7 + trivy: true