Update docker.yml

This commit is contained in:
Elliot Matson 2023-01-31 21:16:53 -06:00 committed by GitHub
parent 8639b3aa18
commit 8914856c0c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -25,6 +25,7 @@ jobs:
build-and-push-image: build-and-push-image:
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
security-events: write
contents: read contents: read
packages: write packages: write
@ -73,12 +74,6 @@ jobs:
tags: ${{ steps.meta.outputs.tags }} tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }} labels: ${{ steps.meta.outputs.labels }}
security-scan:
runs-on: ubuntu-latest
permissions:
security-events: write
needs: build-and-push-image
steps:
- name: Run Trivy vulnerability scanner - name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
with: with: