Skip to content

Commit 5d406da

Browse files
committed
Update imagescan.yml
1 parent c34ba7d commit 5d406da

File tree

1 file changed

+11
-10
lines changed

1 file changed

+11
-10
lines changed

.github/workflows/imagescan.yml

+11-10
Original file line numberDiff line numberDiff line change
@@ -5,16 +5,17 @@ jobs:
55
runs-on: ubuntu-latest
66
steps:
77
- uses: actions/checkout@v2
8-
- name: Build the Docker image
9-
run: docker build . --file Dockerfile --tag local/scanimage:latest
10-
- uses: anchore/scan-action@master
8+
- name: Build the Container image
9+
run: docker build . --file Dockerfile --tag localbuild/scanimage:latest
10+
- uses: anchore/scan-action@v2
11+
id: scan
1112
with:
12-
image-reference: "local/scanimage:latest"
13-
dockerfile-path: "Dockerfile"
14-
fail-build: true
15-
- name: anchore inline scan JSON results
16-
run: for j in `ls ./anchore-reports/*.json`; do echo "---- ${j} ----"; cat ${j}; echo; done
13+
image: "localbuild/scanimage:latest"
14+
acs-report-enable: true
15+
- name: upload Anchore scan SARIF report
16+
uses: github/codeql-action/upload-sarif@v1
17+
with:
18+
sarif_file: results.sarif
1719
- uses: azure/container-scan@v0
1820
with:
19-
image-name: local/scanimage:latest
20-
# Add Serif report once Code Scanner is out of beta stage
21+
image-name: localbuild/scanimage:latest

0 commit comments

Comments
 (0)