scan saved container tar

Signed-off-by: Robert Waffen <[email protected]>
voxpupuli · Aug 9, 2024 · 65c7247 · 65c7247
1 parent 69338a6
commit 65c7247
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -74,7 +74,7 @@ jobs:
         uses: docker/scout-action@v1
         with:
           command: cves
-          image: 'local://ci/voxbox-${{ matrix.rubygem_puppet }}:${{ github.sha }}'
+          image: 'archive:///tmp/voxbox-${{ matrix.rubygem_puppet }}_${{ github.sha }}.tar'
           sarif-file: sarif.output.${{ matrix.rubygem_puppet }}.${{ github.sha }}.json
           summary: true