Add trivy.yaml for report mode scans

newrelic · Nov 19, 2024 · 9ca5ec4 · 9ca5ec4
1 parent f919753
commit 9ca5ec4
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -41,11 +41,10 @@ jobs:
         uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # tag v0.28.0
         with:
           scan-type: fs
+          scan-ref: .
+          trivy-config: trivy.yaml
           format: sarif
           output: trivy-results.sarif
-          ignore-unfixed: true
-          severity: 'CRITICAL,HIGH,MEDIUM,LOW'
-          cache: false
 
       - name: Upload Trivy scan results to GitHub Security tab
         # Only upload sarif when running nightly on the dev branch.