build: use grype for cve-scan

Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de>
ckotzbauer · Mar 5, 2022 · 785c5c7 · 785c5c7
1 parent 51cf118
commit 785c5c7
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -49,6 +49,7 @@ jobs:
             ghcr.io/ckotzbauer/sbom-operator:latest
 
       - name: Container scan
-        uses: azure/container-scan@v0
+        uses: ckotzbauer/actions-toolkit/grype@0.7.0
         with:
-          image-name: ghcr.io/ckotzbauer/sbom-operator
+          scan-target: ghcr.io/ckotzbauer/sbom-operator
+          fail-on: "medium"