Fix /trivy action running against target branch instead of PR branch

Signed-off-by: Brad Davidson <brad.davidson@rancher.com> (cherry picked from commit 3d6e4a79) Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Fix /trivy action running against target branch instead of PR branch
88d5576b · Brad Davidson · Brad Davidson · 9c537cb7 · 88d5576b
Commit 88d5576b authored Sep 04, 2024 by Brad Davidson Committed by Brad Davidson Sep 06, 2024
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 3 deletions

trivy.yaml .github/workflows/trivy.yaml +2 -3

No files found.
--- a/.github/workflows/trivy.yaml
+++ b/.github/workflows/trivy.yaml
@@ -16,7 +16,7 @@ jobs:
    - name: Checkout PR code
      uses: actions/checkout@v4
      with:
-        ref: ${{ github.event.issue.pull_request.head.ref }}
+        ref: refs/pull/${{ github.event.issue.number }}/head
    
    - name: Comment Status on PR
      run: |
@@ -45,4 +45,4 @@ jobs:
    - name: Report Failure
      if: ${{ failure() }}
      run: |
-        gh issue comment ${{ github.event.issue.number }} --edit-last -b ":x: Trivy scan action failed, check logs :x:"
\ No newline at end of file
+        gh issue comment ${{ github.event.issue.number }} --edit-last -b ":x: Trivy scan action failed, check logs :x:"