From cda8b8a211a816989b2c14ddaa4d46172f09363d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Arne=20J=C3=B8rgensen?= Date: Sun, 22 Dec 2024 11:35:11 +0100 Subject: [PATCH] Fix anchore scan action --- .github/workflows/anchore-analysis.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/anchore-analysis.yml b/.github/workflows/anchore-analysis.yml index 8acc4a7..fa12599 100644 --- a/.github/workflows/anchore-analysis.yml +++ b/.github/workflows/anchore-analysis.yml @@ -21,11 +21,12 @@ jobs: - name: Build the Docker image run: docker build . --file Dockerfile --tag localbuild/testimage:latest - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled - uses: anchore/scan-action@main + uses: anchore/scan-action@v6 + id: anchore_scan with: image: "localbuild/testimage:latest" - acs-report-enable: true + fail-build: false - name: Upload Anchore Scan Report uses: github/codeql-action/upload-sarif@v3 with: - sarif_file: results.sarif + sarif_file: ${{ steps.anchore_scan.outputs.sarif }}