diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 124c9b4..704f801 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,6 +32,8 @@ jobs: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} + - name: Free Disk Space (Ubuntu) # Reclaim disk space for build + uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1 - name: Build images id: build run: ./build @@ -41,12 +43,8 @@ jobs: run: ./build --describe >> $GITHUB_STEP_SUMMARY - name: Push images run: ./build --push - - name: Free Disk Space (Ubuntu) # Required by trivy to have enough space to scan full image - uses: jlumbroso/free-disk-space@76866dbe54312617f00798d1762df7f43def6e5c # v1.2.0 - with: - large-packages: false # Temporary fix for https://github.com/jlumbroso/free-disk-space/issues/4 - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@41f05d9ecffa2ed3f1580af306000f734b733e54 # v0.11.2 + uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # v0.24.0 with: image-ref: '${{ steps.build.outputs.LATEST_IMAGE_TAG }}' format: 'sarif'