Run trivy on image in PR (#379)

* Run trivy on image in PR * meta output tags includes image name * Use fromJSON * use outputs.json
strangelove-ventures · Oct 26, 2023 · 4c4be57 · 4c4be57
1 parent 1645b0e
commit 4c4be57
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -60,7 +60,7 @@ jobs:
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
-          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}'
+          image-ref: '${{ fromJSON(steps.meta.outputs.json).tags[0] }}'
           format: 'table'
           exit-code: '1'
           ignore-unfixed: true