chore(ci): Fix typo in Trivy cron job (#4723)

Flagsmith · Oct 11, 2024 · 6005257 · 6005257
1 parent 1456ae8
commit 6005257
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/.github/workflows/platform-docker-trivy-scan.yml b/.github/workflows/platform-docker-trivy-scan.yml
@@ -58,7 +58,7 @@ jobs:
         with:
           shell: bash
           command: |
-            echo ${{ secrets.GITHUB_TOKEN }} | oras login -u ${{ github.action }} --password-stdin
+            oras login -u ${{ github.actor }} --password ${{ secrets.GITHUB_TOKEN }} ${{ inputs.registry-url }}
             oras pull --no-tty $TRIVY_DB_REPOSITORY_SOURCE
             oras pull --no-tty $TRIVY_JAVA_DB_REPOSITORY_SOURCE
             oras push $TRIVY_DB_REPOSITORY db.tar.gz:$MIME_TYPE+gzip --artifact-type $MIME_TYPE+json
@@ -76,6 +76,7 @@ jobs:
 
     permissions:
       contents: read
+      packages: read
       security-events: write
 
     strategy:
@@ -89,6 +90,14 @@ jobs:
           - flagsmith-private-cloud-api
 
     steps:
+      - name: Checkout trivy.yaml
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout: |
+            trivy.yaml
+            .github*
+          sparse-checkout-cone-mode: false
+
       - name: Scan ${{ matrix.image-name }}:main image
         id: trivy
         uses: ./.github/actions/trivy-scan-image