fix trivy scan timeout

kubesphere · Mar 1, 2023 · c2ee863 · c2ee863
1 parent 6b007b5
commit c2ee863
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
@@ -107,10 +107,13 @@ jobs:
             --value-set tag=kubespheredev/ks-jenkins:${{ steps.build_env.outputs.version }} \
             --value-set platform=linux/amd64
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/[email protected]
+        uses: aquasecurity/trivy-action@master
+        env:
+          TRIVY_OFFLINE_SCAN: true
         if: github.event_name == 'pull_request'
         with:
           image-ref: 'kubespheredev/ks-jenkins:${{ steps.build_env.outputs.version }}'
+          timeout: 10m
           format: 'table'
           exit-code: '1'
           ignore-unfixed: true