diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 1273d85..3884a2c 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -57,21 +57,21 @@ jobs: with: driver-opts: network=host - - name: Build and push + - name: Build uses: docker/build-push-action@v6 with: labels: ${{ steps.meta.outputs.labels }} context: ./build file: ./build/Dockerfile - tags: "${{ env.GHCR_REPO }}:dev-pr${{ github.event.pull_request.number }}" - push: true + load: true + tags: "protonmail-bridge:test" build-args: | version=${{ needs.resolve-version.outputs.version }} - name: Run Trivy vulnerability scan uses: aquasecurity/trivy-action@0.30.0 with: - image-ref: "${{ env.GHCR_REPO }}:dev-pr${{ github.event.pull_request.number }}" + image-ref: "protonmail-bridge:test" format: 'sarif' exit-code: 0 severity: 'CRITICAL,HIGH'