diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 87f8635..060ed89 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -45,24 +45,22 @@ jobs: - name: Build Docker Image run: docker build -f Dockerfile -t myapp:latest . - - name: Docker Scout Scan - run: | - curl -fsSL https://raw.githubusercontent.com/docker/scout-cli/main/install.sh -o install-scout.sh - sh install-scout.sh + # - name: Docker Scout Scan + # run: | + # curl -fsSL https://raw.githubusercontent.com/docker/scout-cli/main/install.sh -o install-scout.sh + # sh install-scout.sh - echo ${{ secrets.REPO_PWD }} | docker login -u ${{ secrets.REPO_USER }} --password-stdin + # echo ${{ secrets.REPO_PWD }} | docker login -u ${{ secrets.REPO_USER }} --password-stdin - docker scout quickview - docker scout cves + # docker scout quickview + # docker scout cves - # - name: Docker Scout Scan - # uses: docker/scout-action@v1.0.9 - # with: - # dockerhub-user: ${{ secrets.REPO_USER }} - # dockerhub-password: ${{ secrets.REPO_PWD }} - # command: quickview,cves - # only-severities: critical,high - # sarif-file: scout-report.sarif + - name: Docker Scout Scan + uses: docker/scout-action@v1.0.9 + with: + dockerhub-user: ${{ secrets.REPO_USER }} + dockerhub-password: ${{ secrets.REPO_PWD }} + command: quickview,cves - name: Upload Artifact uses: actions/upload-artifact@v3