fixup! feat: scanning the entire repository

.github/workflows/trivy.yml

@@ -72,15 +72,21 @@ jobs:
       #    branch: update-vulnerabilities
       #    base: master
 
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/[email protected]
+        with:
+          scan-type: 'fs'
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,HIGH'
 
-      - name: Install Trivy
-        run: |
-          sudo apt-get update
-          sudo apt-get install wget -y
-          wget https://github.com/aquasecurity/trivy/releases/download/v0.34.0/trivy_0.34.0_Linux-64bit.deb
-          sudo dpkg -i trivy_0.34.0_Linux-64bit.deb
+      - name: Upload Trivy scan results to file
+        uses: actions/upload-artifact@v2
+        with:
+          name: trivy-results
+          path: trivy-results.sarif
 
-      - name: Scan the entire repository
-        run: |
-          echo "Scanning the entire repository..."
-          trivy fs .
+      # - name: Upload Trivy scan results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #   sarif_file: 'trivy-results.sarif'