diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index e363b3b..c7a5f2d 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -61,12 +61,13 @@ jobs: version=${{ needs.resolve-version.outputs.version }} - name: Run Trivy vulnerability scan - uses: aquasecurity/trivy-action@0.30.0 - with: - image-ref: "protonmail-bridge:test" - format: 'table' - exit-code: 0 - severity: 'CRITICAL,HIGH' + continue-on-error: true + run: | + docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \ + aquasec/trivy:latest image \ + --severity CRITICAL,HIGH \ + --exit-code 0 \ + protonmail-bridge:test build: runs-on: ubuntu-latest