What is in the SARIF file?

ministryofjustice · Jan 8, 2025 · 8ac96b0 · 8ac96b0
1 parent b2cb17b
commit 8ac96b0
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/oracle-observer-image-build.yml b/.github/workflows/oracle-observer-image-build.yml
@@ -150,6 +150,14 @@ jobs:
           trivyignores: 'docker/oracle-observer/.trivyignore'
           ignore-unfixed: 'true'
           output: 'trivy-results.sarif'
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: trivy-file
+          path: trivy-results.sarif
+          retention-days: 1
+
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
         if: failure() # If Trivy found vulnerabilities