Lee Meador

@tonistiigi > To push from buildx you would run the build again with push option.... I would be concerned if I build again that it would be possible for something...

Here is my sarif content ```json { "$schema": "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.5.json", "version": "2.1.0", "runs": [ { "tool": { "driver": { "fullName": "Trivy Vulnerability Scanner", "informationUri": "https://github.com/aquasecurity/trivy", "name": "Trivy", "rules": [ { "id":...

# Docker Image Scan Result (From the sarif above) ## Results - **[ERROR]** **[DS002]** [[HELP LINK](https://avd.aquasec.com/misconfig/ds002)] `Artifact: Dockerfile Type: dockerfile Vulnerability DS002 Severity: HIGH Message: Specify at least 1 USER...

I'll see if I can find time to fix that. Thanks

Log from actionlint run with the little triagle for the 'group'ing clicked to show the stuff the 'find' found. Note that I used to remove the other files that got...

Reminder of how I can find the job run if something else is needed: ``` https://github.com/my-company/publish-maven-action/actions/runs/15470899806/job/43554754778 ```