Fix /trivy action running against target branch instead of PR branch

Signed-off-by: Brad Davidson <[email protected]>
brandond · Sep 4, 2024 · 3d6e4a7 · 3d6e4a7
1 parent de4bb2e
commit 3d6e4a7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
@@ -16,7 +16,7 @@ jobs:
  - name: Checkout PR code
  uses: actions/checkout@v4
  with:
- ref: ${{ github.event.issue.pull_request.head.ref }}
+ ref: refs/pull/${{ github.event.issue.number }}/head
 
  - name: Comment Status on PR
  run: |
@@ -45,4 +45,4 @@ jobs:
  - name: Report Failure
  if: ${{ failure() }}
  run: |
- gh issue comment ${{ github.event.issue.number }} --edit-last -b ":x: Trivy scan action failed, check logs :x:"
+ gh issue comment ${{ github.event.issue.number }} --edit-last -b ":x: Trivy scan action failed, check logs :x:"