This is an automated email from the ASF dual-hosted git repository. payang pushed a commit to branch 4.3 in repository https://gitbox.apache.org/repos/asf/kafka.git
commit 9c302a16cf3effd13dc710efaba38b7e26b2add1 Author: PoAn Yang <[email protected]> AuthorDate: Mon Apr 13 00:32:45 2026 +0900 MINOR: Fix arguments in trivy scan (#22032) Use new argument `scan-ref`. Reviewers: Chia-Ping Tsai <[email protected]> (cherry picked from commit acd37fc30c5fdbbae772144c73b4f2c7e1c21d27) --- .github/workflows/docker_build_and_test.yml | 3 ++- .github/workflows/docker_official_image_build_and_test.yml | 3 ++- .github/workflows/docker_scan.yml | 3 ++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/docker_build_and_test.yml b/.github/workflows/docker_build_and_test.yml index d0ae6243105..542a41d7f39 100644 --- a/.github/workflows/docker_build_and_test.yml +++ b/.github/workflows/docker_build_and_test.yml @@ -56,7 +56,8 @@ jobs: - name: Run CVE scan uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1 with: - image-ref: 'kafka/test:test' + scan-type: 'image' + scan-ref: 'kafka/test:test' format: 'table' severity: 'CRITICAL,HIGH' output: scan_report_${{ github.event.inputs.image_type }}.txt diff --git a/.github/workflows/docker_official_image_build_and_test.yml b/.github/workflows/docker_official_image_build_and_test.yml index a11f6b03917..ad35c3695b7 100644 --- a/.github/workflows/docker_official_image_build_and_test.yml +++ b/.github/workflows/docker_official_image_build_and_test.yml @@ -55,7 +55,8 @@ jobs: - name: Run CVE scan uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1 with: - image-ref: 'kafka/test:test' + scan-type: 'image' + scan-ref: 'kafka/test:test' format: 'table' severity: 'CRITICAL,HIGH' output: scan_report_${{ github.event.inputs.image_type }}.txt diff --git a/.github/workflows/docker_scan.yml b/.github/workflows/docker_scan.yml index ffe5d9d4ecf..659da833422 100644 --- a/.github/workflows/docker_scan.yml +++ b/.github/workflows/docker_scan.yml @@ -32,7 +32,8 @@ jobs: uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1 if: always() with: - image-ref: apache/kafka:${{ matrix.supported_image_tag }} + scan-type: 'image' + scan-ref: apache/kafka:${{ matrix.supported_image_tag }} format: 'table' severity: 'CRITICAL,HIGH' output: scan_report_jvm_${{ matrix.supported_image_tag }}.txt
