Skip to content

Commit 0b1a76d

Browse files
authored
Only warn on critical issues for trivy (#253)
This is just a testing tool, we don't wanna be carrying weird vulns on testing code, but this also isn't shipped anywhere. Signed-off-by: Juan Antonio Osorio <[email protected]>
1 parent 1e61ca0 commit 0b1a76d

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

.github/workflows/trivy.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,7 @@ jobs:
1717
scanners: vuln,secret
1818
exit-code: 1
1919
ignore-unfixed: true
20+
severity: 'CRITICAL'
2021
env:
2122
TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
2223
TRIVY_USERNAME: ${{ github.actor }}

0 commit comments

Comments
 (0)