ci: onyl build arm64; fix image-ref for Trivy

felix-berlin · Feb 28, 2025 · 866db67 · 866db67
1 parent d6c543a
commit 866db67
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
@@ -68,15 +68,16 @@ jobs:
         uses: docker/build-push-action@v6
         with:
           context: .
-          platforms: linux/amd64,linux/arm64
+          # platforms: linux/amd64,linux/arm64
+          platforms: linux/arm64
           push: false
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
 
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/[email protected]
         with:
-          image-ref: "ghcr.io/${{ github.repository }}:${{ steps.meta.outputs.tags }}"
+          image-ref: "ghcr.io/${{ github.repository }}:${{ github.sha }}"
           format: "sarif"
           output: "trivy-results.sarif"
 
@@ -90,7 +91,8 @@ jobs:
         uses: docker/build-push-action@v6
         with:
           context: .
-          platforms: linux/amd64,linux/arm64
+          # platforms: linux/amd64,linux/arm64
+          platforms: linux/arm64
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}