diff --git a/.gitea/workflows/trivy_scan_image.yml b/.gitea/workflows/trivy_scan_image.yml index 1114b3d..d210adb 100644 --- a/.gitea/workflows/trivy_scan_image.yml +++ b/.gitea/workflows/trivy_scan_image.yml @@ -27,6 +27,20 @@ jobs: ignore-unfixed: true severity: "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL" scanners: "vuln,misconfig,secrets" + output: trivy.txt env: TRIVY_USERNAME: "${{ env.user }}" TRIVY_PASSWORD: "${{ secrets.DOCKER_PULL_TOKEN }}" + - name: Publish Trivy Output to Summary + run: | + if [[ -s trivy.txt ]]; then + { + echo "### Security Output" + echo "
Click to expand" + echo "" + echo '```terraform' + cat trivy.txt + echo '```' + echo "
" + } >> $GITHUB_STEP_SUMMARY + fi