trivy scanning fixing

nmofonseca · Jun 1, 2024 · 023732a · 023732a
1 parent c21e0eb
commit 023732a
Showing 1 changed file with 10 additions and 9 deletions.
diff --git a/.github/workflows/image-build.yml b/.github/workflows/image-build.yml
@@ -78,14 +78,6 @@ jobs:
                   ${{ steps.docker_meta.outputs.labels }}
                   ```
                 edit-mode: replace
-
-            # Run CVE scanning with Trivy
-            - name: Run Trivy for all CVEs (non-blocking)
-              uses: aquasecurity/trivy-action@master
-              with:
-                image-ref: ${{ github.run_id }}
-                exit-code: 0
-                format: table 
 
             # Adding docker build, won't push if it's a PR
             - name: Docker build
@@ -96,4 +88,13 @@ jobs:
                 tags: ${{ steps.docker_meta.outputs.tags }}
                 labels: ${{ steps.docker_meta.outputs.labels }}
                 cache-from: type=gha
-                cache-to: type=gha,mode=max
+                cache-to: type=gha,mode=max
+
+
+            # Run CVE scanning with Trivy
+            - name: Run Trivy for all CVEs (non-blocking)
+              uses: aquasecurity/trivy-action@master
+              with:
+                image-ref: ${{ github.repository }}:${{ steps.docker_meta.outputs.tags }}
+                exit-code: 0
+                format: table