Improve CD workflow

essentialkaos · May 13, 2024 · 878f797 · 878f797
1 parent 880bb2c
commit 878f797
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -15,7 +15,7 @@ on:
 
 permissions:
   packages: write
-  contents: write
+  contents: read
 
 env:
   REGISTRY: ghcr.io
@@ -126,9 +126,7 @@ jobs:
         uses: aquasecurity/trivy-action@master
         with:
           image-ref: "${{env.REGISTRY}}/${{github.repository}}:${{matrix.version}}"
-          format: "github"
-          github-pat: ${{secrets.GITHUB_TOKEN}}
-          output: "dependency-results.sbom.json"
+          format: "table"
           ignore-unfixed: true
           severity: "LOW,MEDIUM,HIGH,CRITICAL"
           scanners: "vuln"