diff --git a/Dockerfile b/Dockerfile index dbb6638..fee71f8 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ FROM ghcr.io/aquasecurity/trivy:0.29.0 COPY entrypoint.sh / -RUN apk --no-cache add bash +RUN apk --no-cache add bash curl RUN chmod +x /entrypoint.sh ENTRYPOINT ["/entrypoint.sh"] diff --git a/entrypoint.sh b/entrypoint.sh index 91e503d..98fad5e 100755 --- a/entrypoint.sh +++ b/entrypoint.sh @@ -90,6 +90,7 @@ fi SARIF_ARGS="" ARGS="" +format=$(echo $format | xargs) if [ $format ];then ARGS="$ARGS --format $format" fi @@ -177,7 +178,7 @@ fi if [[ "${format}" == "github" ]]; then echo "Uploading GitHub Dependency Snapshot" - curl -u "${githubPAT}" -H 'Content-Type: application/json' 'https://api.github.com/repos/'$GITHUB_REPOSITORY'/dependency-graph/snapshots' -d @./dependency-results.sbom.json + curl -u "${githubPAT}" -H 'Content-Type: application/json' 'https://api.github.com/repos/argonsecurity/package-test/dependency-graph/snapshots' -d @./${output} fi exit $returnCode