Update trivy-scan.yml

onobc · Dec 11, 2023 · 849ff72 · 849ff72
1 parent eaa3946
commit 849ff72
Showing 1 changed file with 9 additions and 5 deletions.
diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
@@ -13,12 +13,16 @@ jobs:
       - name: Build
         run: |
           ./gradlew clean build -x integrationTest -x test
-          mkdir ./maven-repo-local
+          curdir=$(pwd)
+          echo "*** BONO curdir = $curdir"
+          mkdir $curdir/maven-repo-local
           echo "*** BONO created..."
-          ls ./maven-repo-local
-          ./gradlew --info -Dmaven.repo.local=./maven-repo-local pTML
+          mrl=$(ls $curdir/maven-repo-local)
+          echo $mrl
+          ./gradlew --info -Dmaven.repo.local=$curdir/maven-repo-local pTML
           echo "*** BONO after pTML..."
-          ls ./maven-repo-local
+          mrl=$(ls $curdir/maven-repo-local)
+          echo $mrl
       - name: Run Trivy scan in repo mode
         uses: aquasecurity/trivy-action@master
         with:
@@ -28,7 +32,7 @@ jobs:
           output: 'trivy-results.txt'
           severity: 'CRITICAL,HIGH'
           file-patterns: 'pom:.*\.pom'
-          scan-ref: './maven-repo-local/repository/org/springframework/pulsar'
+          scan-ref: '/github/workspace/maven-repo-local/org/springframework/pulsar'
           exit-code: 1
       - name: Upload Trivy scan results
         if: failure()