From baedbd5871b041f5d69e82a786908c9165c559d1 Mon Sep 17 00:00:00 2001 From: ammnt Date: Mon, 29 Apr 2024 15:05:15 +0300 Subject: [PATCH] added: Snyk and Syft scanning tools for image --- .github/workflows/build.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 5ea2110..6247bd7 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -112,6 +112,7 @@ jobs: - name: Scan the image and upload dependency results🔍 uses: anchore/sbom-action@v0.15.11 with: + syft-version: v1.3.0 image: ghcr.io/ammnt/angie:main artifact-name: image.spdx.json dependency-snapshot: true @@ -125,7 +126,7 @@ jobs: image: ghcr.io/ammnt/angie:main args: --file=Dockerfile - - name: Upload result to GitHub Code Scanning📊 + - name: Upload result to GitHub Code Scanning uses: github/codeql-action/upload-sarif@v3 with: sarif_file: snyk.sarif