Upload trivy results to Github

streamnative / function-mesh

The serverless framework purpose-built for event streaming applications.

https://functionmesh.io/

Apache License 2.0

213 stars 29 forks source link

Upload trivy results to Github #755

Closed illegalnumbers closed 6 months ago

illegalnumbers commented 6 months ago

Motivation

This allows for uploading Trivy scan results to the Security tab in Github allowing for easier viewing.

Modifications

Change Trivy CI job to include upload of each Trivy result.

Verifying this change

[x] Make sure that the change passes the CI checks.

This change is a trivial rework / code cleanup without any test coverage.

Documentation

Check the box below.

Need to update docs?

[ ] doc-required
[x] no-need-doc

CI Update

[ ] doc

github-advanced-security[bot] commented 6 months ago

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.