ci: update scan steps to use drone-ssh Docker image

- Change docker image tag from repository name to drone-ssh for scan steps

Signed-off-by: appleboy <appleboy.tw@gmail.com>
This commit is contained in:
appleboy 2025-11-28 21:58:35 +08:00
parent a934a831d2
commit 235847ea23
No known key found for this signature in database

View File

@ -73,12 +73,12 @@ jobs:
file: docker/Dockerfile file: docker/Dockerfile
push: false push: false
load: true load: true
tags: ${{ github.repository }}:scan tags: drone-ssh:scan
- name: Run Trivy vulnerability scanner - name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
with: with:
image-ref: "${{ github.repository }}:scan" image-ref: "drone-ssh:scan"
format: "sarif" format: "sarif"
output: "trivy-results.sarif" output: "trivy-results.sarif"
severity: "CRITICAL,HIGH" severity: "CRITICAL,HIGH"