Fix Trivy: run directly via docker instead of action to avoid exit code issues

This commit is contained in:
Anton 2026-03-11 19:49:03 +00:00
parent 36a706b627
commit 3ae2d2dee5

View File

@ -61,12 +61,13 @@ jobs:
version=${{ needs.resolve-version.outputs.version }}
- name: Run Trivy vulnerability scan
uses: aquasecurity/trivy-action@0.30.0
with:
image-ref: "protonmail-bridge:test"
format: 'table'
exit-code: 0
severity: 'CRITICAL,HIGH'
continue-on-error: true
run: |
docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
aquasec/trivy:latest image \
--severity CRITICAL,HIGH \
--exit-code 0 \
protonmail-bridge:test
build:
runs-on: ubuntu-latest