diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index c1b363c5..80441138 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -119,6 +119,7 @@ jobs: format: 'github' output: 'dependency-results.sbom.json' github-pat: ${{ secrets.GITHUB_TOKEN }} + scanners: vuln - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@master if: ${{ github.event_name != 'pull_request' }} @@ -127,6 +128,7 @@ jobs: format: 'sarif' output: 'trivy-results.sarif' severity: 'CRITICAL' + scanners: vuln - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v2 if: ${{ github.event_name != 'pull_request' }} @@ -136,7 +138,7 @@ jobs: build-and-push-sagemaker-image: needs: - build-and-push-image - runs-on: large + runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v3 diff --git a/.github/workflows/client-tests.yaml b/.github/workflows/client-tests.yaml index 07eeb270..7ccef3b0 100644 --- a/.github/workflows/client-tests.yaml +++ b/.github/workflows/client-tests.yaml @@ -8,7 +8,7 @@ on: jobs: run_tests: - runs-on: ubuntu-20.04 + runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 3c8f2258..e82e8b20 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -17,7 +17,7 @@ concurrency: jobs: run_tests: - runs-on: ubuntu-latest-16-cores + runs-on: ubuntu-latest env: SCCACHE_GHA_ENABLED: "on"