Adjuest binskim options.

microsoft · Feb 20, 2025 · 658dfa2 · 658dfa2
1 parent e577f62
commit 658dfa2
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/.github/workflows/binskim.yaml b/.github/workflows/binskim.yaml
@@ -73,7 +73,8 @@ jobs:
             echo "Error: kata-agent binary not found!"
             exit 1
           fi
-          binskim analyze "$KATA_AGENT_PATH" --output binskim-agent.sarif --verbose
+          binskim analyze "$KATA_AGENT_PATH" --output binskim-agent.sarif --level Error --kind Pass;Fail
+ 
 
       #- name: Scan runtime binary
       #  run: | 
@@ -82,7 +83,7 @@ jobs:
       #      echo "Error: kata-runtime binary not found!"
       #      exit 1
       #    fi
-      #    binskim analyze "$KATA_RUNTIME_PATH" --output binskim-runtime.sarif --verbose
+      #    binskim analyze "$KATA_RUNTIME_PATH" --output binskim-agent.sarif --level Error --kind Pass;Fail
 
       - name: Scan tardev-snapshotter binary
         run: |
@@ -91,7 +92,7 @@ jobs:
             echo "Error: tardev-snapshotter binary not found!"
             exit 1
           fi
-          binskim analyze "$TARDEV_SNAPSHOTTER_PATH" --output binskim-snapshotter.sarif --verbose
+          binskim analyze "$TARDEV_SNAPSHOTTER_PATH" --output binskim-agent.sarif --level Error --kind Pass;Fail
 
       - name: Scan overlay binary
         run: | 
@@ -100,7 +101,7 @@ jobs:
             echo "Error: kata-overlay binary not found!"
             exit 
           fi
-          binskim analyze "$OVERLAY_PATH" --output binskim-overlay.sarif --verbose
+          binskim analyze "$OVERLAY_PATH" --output binskim-agent.sarif --level Error --kind Pass;Fail
 
       # Validate SARIF reports before uploading
       - name: Validate SARIF Reports