diff --git a/.github/workflows/pull-containers-and-push-to-ghcr.yml b/.github/workflows/pull-containers-and-push-to-ghcr.yml index 488095fc1..02fb9be8c 100644 --- a/.github/workflows/pull-containers-and-push-to-ghcr.yml +++ b/.github/workflows/pull-containers-and-push-to-ghcr.yml @@ -46,8 +46,9 @@ jobs: image-ref: '${{ matrix.image.name }}' scan-type: 'image' hide-progress: false - exit-code: 0 # Setting the exit-code to 1 will fail the action, without publishing to Github Security Tab (> aquasecurity/trivy-action@0.13.1) + exit-code: 1 severity: 'CRITICAL,HIGH' + scanners: 'vuln' timeout: 15m0s ignore-unfixed: true