Skip to content

Commit 352b4a6

Browse files
authored
[chore][vuln-scan] Workaround anchore-scan not showing vulnerabilities (#6054)
1 parent 5772b9e commit 352b4a6

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

.github/workflows/vuln-scans.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -151,12 +151,18 @@ jobs:
151151
path: ./dist
152152
- run: docker load -i ./dist/image.tar
153153
- uses: anchore/scan-action@v6
154+
id: anchore-scan
154155
with:
155156
severity-cutoff: "high"
156157
only-fixed: true
157158
add-cpes-if-none: true
158-
output-format: "table"
159+
output-format: sarif
159160
image: "otelcol${{ matrix.FIPS == true && '-fips' || '' }}:latest"
161+
- name: Upload result to GitHub Code Scanning
162+
if: always()
163+
uses: github/codeql-action/upload-sarif@v3
164+
with:
165+
sarif_file: ${{ steps.anchore-scan.outputs.sarif }}
160166

161167
anchore-win-image-scan:
162168
runs-on: ${{ matrix.OS }}

0 commit comments

Comments
 (0)