diff --git a/.github/workflows/build-slim.yml b/.github/workflows/build-slim.yml index 782c140..a781ff3 100644 --- a/.github/workflows/build-slim.yml +++ b/.github/workflows/build-slim.yml @@ -15,6 +15,7 @@ on: env: REGISTRY: ghcr.io IMAGE_NAME: polarix-containers/nginx + TAG: slim jobs: build: @@ -46,7 +47,7 @@ jobs: with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} tags: | - slim + ${{ env.TAG }} - name: Build and push Docker image id: build-and-push @@ -68,7 +69,7 @@ jobs: - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@master with: - image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.TAG }} format: template template: '@/contrib/sarif.tpl' output: trivy-results.sarif @@ -93,11 +94,11 @@ jobs: uses: anchore/scan-action@v4 id: grype with: - image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.TAG }} fail-build: false - name: Upload Grype scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3 with: sarif_file: ${{ steps.grype.outputs.sarif }} - category: grype \ No newline at end of file + category: grype