diff --git a/.github/workflows/vulnerability-scan.yml b/.github/workflows/vulnerability-scan.yml index e7d3ceff..76796156 100644 --- a/.github/workflows/vulnerability-scan.yml +++ b/.github/workflows/vulnerability-scan.yml @@ -64,20 +64,13 @@ jobs: strategy: matrix: ${{ fromJson(needs.setup-matrix.outputs.matrix) }} steps: - - name: Login to GitHub Container Registry - uses: docker/login-action@v3 - with: - registry: ghcr.io - username: ${{ github.actor }} - password: ${{ secrets.GITHUB_TOKEN }} - name: Scan for vulnerabilities id: scan uses: crazy-max/ghaction-container-scan@v3 with: image: ${{ env.REGISTRY }}/${{ github.repository }}/${{ matrix.images }}:${{ inputs.tag }} dockerfile: ./images/${{ matrix.images }} - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + github_token: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file if: ${{ steps.scan.outputs.sarif != '' }} uses: github/codeql-action/upload-sarif@v3