chore(ci): debug trivy

interledger · Dec 5, 2024 · 882beb5 · 882beb5
1 parent ba3c352
commit 882beb5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/node-build.yml b/.github/workflows/node-build.yml
@@ -338,7 +338,7 @@ jobs:
       - name: Scan docker image
         run: |
           docker images
-          /tmp/trivy image --db-repository ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db --java-db-repository ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed --format table --vuln-type os,library --exit-code 1 --severity HIGH --input /tmp/${{ github.sha }}-${{ matrix.package }}-${{ matrix.platform.name }}-${{ needs.version-generator.outputs.version }}.tar
+          /tmp/trivy image --debug --ignorefile ${{ github.workspace }}/.trivyignore --db-repository ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db --java-db-repository ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed --format table --vuln-type os,library --exit-code 1 --severity HIGH --input /tmp/${{ github.sha }}-${{ matrix.package }}-${{ matrix.platform.name }}-${{ needs.version-generator.outputs.version }}.tar
   
   push:
     name: Push to registry