debug scan

ministryofjustice · Dec 5, 2024 · b2fc6e9 · b2fc6e9
1 parent d5d24e8
commit b2fc6e9
Showing 1 changed file with 19 additions and 8 deletions.
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
@@ -19,17 +19,14 @@ jobs:
         id: checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
-
-      - name: Build with Docker Compose
+      - name: Build
         id: build
         shell: bash
         env:
-          IMAGE_NAME: ${{ github.repository }}
+          IMAGE_NAME: ghcr.io/${{ github.repository }}
           IMAGE_TAG: ${{ github.sha }}
         run: |
-          docker compose build
+          make build
 
       - name: Scan
         id: scan
@@ -38,6 +35,20 @@ jobs:
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1
         with:
-          image-ref: ${{ github.repository }}_eks:${{ github.sha }}
+          image-ref: ghcr.io/${{ github.repository }}:${{ github.sha }}
           severity: HIGH,CRITICAL
-          exit-code: 1
+          exit-code: 1
+
+      # - name: Set up Docker Buildx
+      #   uses: docker/setup-buildx-action@v2
+
+      # - name: Build with Docker Compose
+      #   id: build
+      #   shell: bash
+      #   env:
+      #     IMAGE_NAME: ${{ github.repository }}
+      #     IMAGE_TAG: ${{ github.sha }}
+      #   run: |
+      #     docker compose build
+
+