Fix /trivy action running against target branch instead of PR branch

Signed-off-by: Brad Davidson <[email protected]>
k3s-io · Sep 4, 2024 · 3d6e4a7 · 3d6e4a7
1 parent de4bb2e
commit 3d6e4a7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
@@ -16,7 +16,7 @@ jobs:
     - name: Checkout PR code
       uses: actions/checkout@v4
       with:
-        ref: ${{ github.event.issue.pull_request.head.ref }}
+        ref: refs/pull/${{ github.event.issue.number }}/head
 
     - name: Comment Status on PR
       run: |
@@ -45,4 +45,4 @@ jobs:
     - name: Report Failure
       if: ${{ failure() }}
       run: |
-        gh issue comment ${{ github.event.issue.number }} --edit-last -b ":x: Trivy scan action failed, check logs :x:"
+        gh issue comment ${{ github.event.issue.number }} --edit-last -b ":x: Trivy scan action failed, check logs :x:"