more

.github/actions/scan/action.yaml

@@ -10,23 +10,24 @@ inputs:
     description: "The output file when using 'sarif' format."
     default: "trivy-results.sarif"
 runs:
+  using: composite
   steps:
     - uses: docker/setup-qemu-action@v3
       with:
         platforms: amd64
     - uses: docker/setup-buildx-action@v3
-    - uses: actions/checkout@v4
     - run: make docker-build
+      shell: bash
     - uses: aquasecurity/trivy-action@master
       with:
         image-ref: local/kubegres:scan-amd64
         exit-code: 1
         ignore-unfixed: false
         severity: 'CRITICAL,HIGH,MEDIUM'
-        format: {{ inputs.format }}
-        output: {{ inputs.output }}
+        format: '{{ inputs.format }}'
+        output: '{{ inputs.output }}'
     - name: Upload Trivy scan results to GitHub Security tab
       uses: github/codeql-action/upload-sarif@v3
       if: ${{ inputs.format == 'sarif' }}
       with:
-        sarif_file: {{ inputs.output }}
+        sarif_file: '{{ inputs.output }}'

.github/workflows/daily.yaml

@@ -1,4 +1,4 @@
-name: Scan
+name: Daily
 
 on:
   schedule:
@@ -11,8 +11,8 @@ jobs:
   scan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: ./.github/actions/scan
         with:
-            format: 'sarif'
-            output: 'trivy-results.sarif'
+          format: 'sarif'
+          output: 'trivy-results.sarif'

.github/workflows/scan.yaml

@@ -19,7 +19,7 @@ jobs:
   scan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: ./.github/actions/scan
         with:
           format: 'table'