From ee71b84dcd76f86e33c79ecf40f4ca95b2000991 Mon Sep 17 00:00:00 2001 From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com> Date: Sun, 17 Nov 2024 13:13:18 -0800 Subject: [PATCH] chore: set trivy to also scan for misconfig (#592) --- .github/workflows/trivy.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index a45459e..4394530 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -22,6 +22,7 @@ jobs: with: image-ref: 'ghcr.io/secureblue/silverblue-main-userns-hardened:latest' format: template + scanners: vuln,secret,misconfig template: '@/contrib/sarif.tpl' output: trivy-results.sarif timeout: 30m0s