mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-10-18 11:56:01 +02:00
Fix Bandit detection and update Trivy to v0.69.1
- Fix defusedxml import style in print_queue.py to be recognized by Bandit (use `import defusedxml.ElementTree as ET` not `from defusedxml import`) - Update Trivy scanner version from 0.65.0 to 0.69.1
This commit is contained in:
@@ -79,7 +79,7 @@ jobs:
|
||||
format: 'sarif'
|
||||
output: 'trivy-results.sarif'
|
||||
severity: 'CRITICAL,HIGH,MEDIUM'
|
||||
trivy-version: 'v0.69.1'
|
||||
version: 'v0.69.1'
|
||||
|
||||
- name: Upload Trivy results to GitHub Security
|
||||
uses: github/codeql-action/upload-sarif@v4
|
||||
@@ -96,7 +96,7 @@ jobs:
|
||||
format: 'sarif'
|
||||
output: 'trivy-config-results.sarif'
|
||||
severity: 'CRITICAL,HIGH,MEDIUM'
|
||||
trivy-version: 'v0.69.1'
|
||||
version: 'v0.69.1'
|
||||
|
||||
- name: Upload Trivy config results
|
||||
uses: github/codeql-action/upload-sarif@v4
|
||||
|
||||
Reference in New Issue
Block a user