diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index 055bf062..6fee43fc 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -29,7 +29,7 @@ jobs: with: image-ref: 'vprodemo.azurecr.io/rpc-go:${{ github.sha }}' format: 'sarif' - output: 'trivy-results.sarif' + output: 'rpcgo-trivy-results.sarif' exit-code: '1' ignore-unfixed: true vuln-type: 'os,library' @@ -38,4 +38,10 @@ jobs: uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8 if: always() with: - sarif_file: 'trivy-results.sarif' \ No newline at end of file + sarif_file: 'rpcgo-trivy-results.sarif' + - name: Upload Trivy Artifacts + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 + if: always() + with: + name: rpcgo-trivy-results.sarif + path: rpcgo-trivy-results.sarif