diff --git a/.github/workflows/uberjar.yml b/.github/workflows/uberjar.yml index 08bed71b8bf031c0f5746ce0df63b735f723734f..bbe22f8cf4a884f6c4b162a82d6c0f853218b792 100644 --- a/.github/workflows/uberjar.yml +++ b/.github/workflows/uberjar.yml @@ -151,7 +151,20 @@ jobs: format: sarif output: trivy-results.sarif - - name: Upload Trivy scan results to GitHub Security tab + - name: Upload Trivy scan results to GitHub Security tab if master or main (ee) + if: ${{ (github.ref_name == 'master' || github.ref_name == 'main') && matrix.edition == 'ee' }} + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: 'trivy-results.sarif' + + - name: Upload Trivy scan results to GitHub Security tab if master or main (oss) + if: ${{ (github.ref_name == 'master' || github.ref_name == 'main') && matrix.edition == 'oss' }} + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: 'trivy-results.sarif' + + - name: Upload Trivy scan results to GitHub Security tab if dev branch + if: ${{ !(startsWith(github.ref_name,'master') || startsWith(github.ref_name,'main') || startsWith(github.ref_name,'backport')) && matrix.edition == 'ee' }} uses: github/codeql-action/upload-sarif@v2 with: sarif_file: 'trivy-results.sarif'