From 0e2b6f7948f9f84126ce0e0b48c250ba108b75cf Mon Sep 17 00:00:00 2001 From: jonathanagustin <5193877+jonathanagustin@users.noreply.github.com> Date: Wed, 25 Sep 2024 19:37:42 -0400 Subject: [PATCH] test --- .github/workflows/scan-image.yml | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/.github/workflows/scan-image.yml b/.github/workflows/scan-image.yml index 99f8446..ed5c56f 100644 --- a/.github/workflows/scan-image.yml +++ b/.github/workflows/scan-image.yml @@ -22,27 +22,29 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + with: + fetch-depth: 1 - name: Login to GitHub Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0 with: registry: ghcr.io username: ${{ github.repository_owner }} password: ${{ secrets.GITHUB_TOKEN }} - name: Aqua Security Trivy - uses: aquasecurity/trivy-action@0.24.0 + uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # 0.24.0 with: - image-ref: ghcr.io/${{ github.repository_owner }}/pptx2video:latest + image-ref: ghcr.io/drengskapur/pptx2video:latest - name: Anchore Container Scan - uses: anchore/scan-action@v4.1.2 + uses: anchore/scan-action@64a33b277ea7a1215a3c142735a1091341939ff5 # v4.1.2 with: - image: ghcr.io/${{ github.repository_owner }}/pptx2video:latest + image: ghcr.io/drengskapur/pptx2video:latest - name: Upload Artifact - Security Reports - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v4 with: name: security-reports path: reports/