From c77f06893a438f362525abe358ca9879e9c126a6 Mon Sep 17 00:00:00 2001
From: Xiaonan Shen <s@sxn.dev>
Date: Thu, 19 Nov 2020 22:52:36 -0800
Subject: [PATCH] Upload Anchore

---
 .github/workflows/deb.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/deb.yaml b/.github/workflows/deb.yaml
index 593ad3a..89c2014 100644
--- a/.github/workflows/deb.yaml
+++ b/.github/workflows/deb.yaml
@@ -55,6 +55,10 @@ jobs:
           image: protonmail-bridge:latest
           fail-build: true
           severity-cutoff: critical
+      - name: Upload Anchore scan SARIF report
+        uses: github/codeql-action/upload-sarif@v1
+        with:
+          sarif_file: ${{ steps.scan.outputs.sarif }}
       - name: Push image
         uses: docker/build-push-action@v2
         with: