Skip to content

Conversation

@jmgasper
Copy link
Contributor

@jmgasper jmgasper commented Nov 1, 2025

No description provided.

@jmgasper jmgasper merged commit 64b2288 into master Nov 1, 2025
3 of 4 checks passed
jobs:
trivy-scan:
name: Use Trivy
runs-on: ubuntu-24.04
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[⚠️ maintainability]
Consider using a stable version of Ubuntu, such as ubuntu-latest, instead of specifying ubuntu-24.04, which may not be officially released or supported yet. This ensures compatibility and reduces the risk of unexpected issues.

ignore-unfixed: true
format: "sarif"
output: "trivy-results.sarif"
severity: "CRITICAL,HIGH,UNKNOWN"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[❗❗ correctness]
The severity level UNKNOWN is included, which might not be a standard severity level for Trivy. Verify if this is intended or if it should be removed to avoid potential misconfigurations.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants