Merge pull request #2500 from subspace/fix-trivy

fix container image sha format for trivy scanner
autonomys · Feb 2, 2024 · 1f3336a · 1f3336a
2 parents 466b4fe + 045ca12
commit 1f3336a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/trivy-security-scan.yml b/.github/workflows/trivy-security-scan.yml
@@ -26,7 +26,7 @@ jobs:
       - name: Run Trivy vulnerability scanner on image
         uses: aquasecurity/trivy-action@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca # @v0.16.1
         with:
-          image-ref: ghcr.io/${{ github.repository_owner }}/${{ matrix.image }}:${{ github.event.client_payload.sha }}
+          image-ref: ghcr.io/${{ github.repository_owner }}/${{ matrix.image }}:sha-${{ github.event.client_payload.sha }}
           format: "sarif"
           output: "trivy-results.sarif"
           exit-code: "1"