fix: pass ACTIONS_RUNTIME_TOKEN to Trivy

Automattic · Sep 30, 2024 · b0447b4 · b0447b4
1 parent a0a5ba5
commit b0447b4
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/actions/build-docker-image/action.yml b/.github/actions/build-docker-image/action.yml
@@ -45,6 +45,10 @@ inputs:
     description: The password to use for the registry
     required: false
     default: ${{ github.token }}
+  auth_token:
+    description: The token to authenticate with GitHub
+    required: false
+    default: ${{ github.token }}
 runs:
   using: composite
   steps:
@@ -131,6 +135,8 @@ runs:
       uses: docker://aquasec/trivy:0.55.2
       with:
         args: image --format json --ignore-unfixed --vuln-type os ${{ inputs.primaryTag }} --output trivy.json
+      env:
+        ACTIONS_RUNTIME_TOKEN: ${{ inputs.auth_token }}
 
     - name: Print report
       uses: docker://aquasec/trivy:0.55.2