test vulnscan action

.gitea/workflows/vulnscan.yaml

@@ -17,10 +17,8 @@ jobs:
         uses: aquasecurity/trivy-action@master
         with:
           image-ref: 'docker.asperti.com/paspo/glpi:latest'
-          format: 'sarif'
+          format: 'json'
-          output: 'trivy-results.sarif'
+          output: 'trivy-results.json'
 
       - name: check output
-        env:
+        run: if [ $(jq '.Results[0].Vulnerabilities|length' trivy-results.json) -ne "0" ] ; then exit 1 ; fi
-          AAA: ${{ steps.scan.outputs }}
-        run: echo ""