diff --git a/.github/workflows/trivy-analysis.yaml b/.github/workflows/trivy-analysis.yaml deleted file mode 100644 index 6b67342..0000000 --- a/.github/workflows/trivy-analysis.yaml +++ /dev/null @@ -1,39 +0,0 @@ ---- -name: trivy-analysis - -# yamllint disable-line rule:truthy -on: - push: - branches: - - main - pull_request: - -concurrency: - group: ${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true - -jobs: - trivy-analysis: - name: trivy-analysis - runs-on: "ubuntu-24.04" - steps: - - name: Checkout code - uses: actions/checkout@v6 - - - name: Build an image from Dockerfile - run: | - docker build -t docker.io/dokku/s3backup:${{ github.sha }} . - - - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master - with: - image-ref: "docker.io/dokku/s3backup:${{ github.sha }}" - format: "template" - template: "@/contrib/sarif.tpl" - output: "trivy-results.sarif" - severity: "CRITICAL,HIGH" - - - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v4 - with: - sarif_file: "trivy-results.sarif"