From acce3f509c449cecae3451979ecba77bad74c8ae Mon Sep 17 00:00:00 2001
From: Thanassis Avgerinos <thanassis.avgerinos@gmail.com>
Date: Wed, 28 Aug 2024 16:48:12 -0400
Subject: [PATCH] Attempt switching to spdx-json.

---
 .github/workflows/sca_trivy.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/sca_trivy.yml b/.github/workflows/sca_trivy.yml
index 6fedd6f..8cd6a1b 100644
--- a/.github/workflows/sca_trivy.yml
+++ b/.github/workflows/sca_trivy.yml
@@ -63,7 +63,7 @@ jobs:
         uses: aquasecurity/trivy-action@0.20.0
         with:
           image-ref: ${{ github.event.inputs.docker_image }}
-          format: 'json'
+          format: 'spdx-json'
           output: sca_trivy.spdx.json
 
       - name: Upload SARIF file as an artifact