diff --git a/.github/workflows/node-build.yml b/.github/workflows/node-build.yml index f9ffe1eb6a..1a5f75f112 100644 --- a/.github/workflows/node-build.yml +++ b/.github/workflows/node-build.yml @@ -338,7 +338,7 @@ jobs: - name: Scan docker image run: | docker images - /tmp/trivy image --db-repository ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db --java-db-repository ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed --format table --vuln-type os,library --exit-code 1 --severity HIGH --input /tmp/${{ github.sha }}-${{ matrix.package }}-${{ matrix.platform.name }}-${{ needs.version-generator.outputs.version }}.tar + /tmp/trivy image --debug --ignorefile ${{ github.workspace }}/.trivyignore --db-repository ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db --java-db-repository ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed --format table --vuln-type os,library --exit-code 1 --severity HIGH --input /tmp/${{ github.sha }}-${{ matrix.package }}-${{ matrix.platform.name }}-${{ needs.version-generator.outputs.version }}.tar push: name: Push to registry