diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index ed5db9ee..382d6ca9 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -57,15 +57,24 @@ jobs: username: voxpupulibot password: ${{ secrets.DOCKERHUB_BOT_PASSWORD }} - - name: Analyze Container Image - id: analyze-image + - name: Analyze container image for CVEs + id: analyze-image-cves uses: docker/scout-action@v1 with: - command: cves,compare - to: 'ghcr.io/voxpupuli/puppetserver:${{ matrix.version }}-latest' + command: cves image: 'local://ci/puppetserver:${{ matrix.version }}' sarif-file: sarif.output.${{ matrix.version }}.${{ github.sha }}.json + write-comment: false + + - name: Compare container image to latest from Registry + id: compare-image + uses: docker/scout-action@v1 + with: + command: compare + image: 'local://ci/puppetserver:${{ matrix.version }}' + to: 'ghcr.io/voxpupuli/puppetserver:${{ matrix.version }}-latest' summary: true + keep-previous-comments: true - name: Upload SARIF result id: upload-sarif