Updated CI

This commit is contained in:
maziggy
2026-02-18 17:27:37 +01:00
parent 5bcfadbd8d
commit 10cae700f4
+4 -2
View File
@@ -12,6 +12,7 @@ on:
- 'docker-compose*.yml'
- 'requirements.txt'
- 'frontend/package*.json'
- '.github/workflows/security.yml'
pull_request:
paths:
- 'backend/**'
@@ -20,6 +21,7 @@ on:
- 'docker-compose*.yml'
- 'requirements.txt'
- 'frontend/package*.json'
- '.github/workflows/security.yml'
workflow_dispatch:
# Allow manual trigger
@@ -73,7 +75,7 @@ jobs:
run: docker build -t bambuddy:security-scan .
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@0.34.0
uses: aquasecurity/trivy-action@0.33.1
with:
image-ref: 'bambuddy:security-scan'
format: 'sarif'
@@ -89,7 +91,7 @@ jobs:
category: trivy
- name: Run Trivy for Dockerfile/IaC
uses: aquasecurity/trivy-action@0.34.0
uses: aquasecurity/trivy-action@0.33.1
with:
scan-type: 'config'
scan-ref: '.'