diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 3884a2c..e363b3b 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -45,22 +45,14 @@ jobs: with: images: ${{ env.GHCR_REPO }} - - name: Login to GHCR - uses: docker/login-action@v3 - with: - registry: ghcr.io - username: ${{ github.repository_owner }} - password: ${{ secrets.GITHUB_TOKEN }} - - name: Set up Docker Buildx uses: docker/setup-buildx-action@v3 with: - driver-opts: network=host + driver: docker - name: Build uses: docker/build-push-action@v6 with: - labels: ${{ steps.meta.outputs.labels }} context: ./build file: ./build/Dockerfile load: true @@ -72,15 +64,9 @@ jobs: uses: aquasecurity/trivy-action@0.30.0 with: image-ref: "protonmail-bridge:test" - format: 'sarif' + format: 'table' exit-code: 0 severity: 'CRITICAL,HIGH' - output: 'trivy-results.sarif' - - - name: Upload Trivy scan SARIF report - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: 'trivy-results.sarif' build: runs-on: ubuntu-latest