fixup! feat: scanning the entire repository

.github/workflows/trivy.yml

@@ -51,36 +51,19 @@ jobs:
           #skip-dirs: "ignored-dir"
           #trivy-config: trivy.yaml
 
-      #- name: Upload Trivy scan results as artifact
-      #  uses: actions/upload-artifact@v2
-      #  with:
-      #    name: trivy-results
-      #    path: trivy-results.sarif
-
-      #- name: Upload Trivy scan results to GitHub Security tab
-      #  uses: github/codeql-action/upload-sarif@v2
-      #  with:
-      #    sarif_file: 'trivy-results.sarif'
+      - name: Run Trivy scan
+        run: |
+          trivy fs --target /home/runner/work/hale/hale --debug --format sarif --output trivy-results.sarif
 
-
-      #- name: Create Pull Request
-      #  uses: peter-evans/create-pull-request@v5
+      #- name: Run Trivy vulnerability scanner
+      #  uses: aquasecurity/[email protected]
       #  with:
-      #    commit-message: update vulnerability list
-      #    title: 'ci: Update vulnerability list'
-      #    body: Update the vulnerability list
-      #    branch: update-vulnerabilities
-      #    base: master
-
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/[email protected]
-        with:
-          scan-type: 'fs'
-          target: '/home/runner/work/hale/hale' # specify the target directory or file
-          format: 'sarif'
-          output: 'trivy-results.sarif'
-          severity: 'CRITICAL,HIGH'
-          debug: true
+      #    scan-type: 'fs'
+      #    target: '/home/runner/work/hale/hale' 
+      #    format: 'sarif'
+      #    output: 'trivy-results.sarif'
+      #    severity: 'CRITICAL,HIGH'
+      #    debug: true
 
       - name: Upload Trivy scan results to file
         uses: actions/upload-artifact@v2
@@ -91,4 +74,14 @@ jobs:
       # - name: Upload Trivy scan results to GitHub Security tab
       #   uses: github/codeql-action/upload-sarif@v2
       #   with:
-      #   sarif_file: 'trivy-results.sarif'
+      #   sarif_file: 'trivy-results.sarif'
+
+
+      #- name: Create Pull Request
+      #  uses: peter-evans/create-pull-request@v5
+      #  with:
+      #    commit-message: update vulnerability list
+      #    title: 'ci: Update vulnerability list'
+      #    body: Update the vulnerability list
+      #    branch: update-vulnerabilities
+      #    base: master