diff --git a/.github/workflows/security-gate.yml b/.github/workflows/security-gate.yml index 03b72fc..8227bef 100644 --- a/.github/workflows/security-gate.yml +++ b/.github/workflows/security-gate.yml @@ -18,7 +18,7 @@ jobs: MAX_HIGH: 0 MAX_MEDIUM: 0 MAX_LOW: 0 - GITHUB_TOKEN: ${{ secrets.TOKEN }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} steps: - name: Checkout repository uses: actions/checkout@v4 @@ -29,9 +29,9 @@ jobs: - name: Verify security alerts from dependabot run: | docker run ghcr.io/instriq/security-gate/security-gate:latest \ - -t $GITHUB_TOKEN \ - -r ${{ github.repository }} \ - --critical $MAX_CRITICAL \ - --high $MAX_HIGH \ - --medium $MAX_MEDIUM \ - --low $MAX_LOW \ No newline at end of file + -t "$GITHUB_TOKEN" \ + -r "${{ github.repository }}" \ + -c "$MAX_CRITICAL" \ + -h "$MAX_HIGH" \ + -m "$MAX_MEDIUM" \ + -l "$MAX_LOW"