Fix anchore scan action

spejder · Dec 22, 2024 · cda8b8a · cda8b8a
1 parent 894f0ca
commit cda8b8a
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/anchore-analysis.yml b/.github/workflows/anchore-analysis.yml
@@ -21,11 +21,12 @@ jobs:
     - name: Build the Docker image
       run: docker build . --file Dockerfile --tag localbuild/testimage:latest
     - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled
-      uses: anchore/scan-action@main
+      uses: anchore/scan-action@v6
+      id: anchore_scan
       with:
         image: "localbuild/testimage:latest"
-        acs-report-enable: true
+        fail-build: false
     - name: Upload Anchore Scan Report
       uses: github/codeql-action/upload-sarif@v3
       with:
-        sarif_file: results.sarif
+        sarif_file: ${{ steps.anchore_scan.outputs.sarif }}