test vulnscan action

2023-10-30 11:57:51 +01:00 · 2023-10-30 11:57:51 +01:00 · 8473b553f8
commit 8473b553f8
parent c3e2fab933
1 changed files with 3 additions and 5 deletions
--- a/.gitea/workflows/vulnscan.yaml
+++ b/.gitea/workflows/vulnscan.yaml
@ -17,10 +17,8 @@ jobs:
        uses: aquasecurity/trivy-action@master
        with:
          image-ref: 'docker.asperti.com/paspo/glpi:latest'
-          format: 'sarif'
-          output: 'trivy-results.sarif'
+          format: 'json'
+          output: 'trivy-results.json'

      - name: check output
-        env:
-          AAA: ${{ steps.scan.outputs }}
-        run: echo ""
+        run: if [ $(jq '.Results[0].Vulnerabilities|length' trivy-results.json) -ne "0" ] ; then exit 1 ; fi