Use action instead of workflow reuse

solarwinds · Jan 24, 2025 · a23f836 · a23f836
1 parent 43b19cd
commit a23f836
Showing 1 changed file with 20 additions and 10 deletions.
diff --git a/.github/workflows/build_publish_image_autoinstrumentation.yaml b/.github/workflows/build_publish_image_autoinstrumentation.yaml
@@ -53,13 +53,18 @@ jobs:
       - name: Set artifact name
         run: echo "artifact-name=${{ github.repository_owner }}/autoinstrumentation-python:${{ env.VERSION }}" >> $GITHUB_ENV
 
-      - name: RL scan image
-        uses: ./.github/workflows/reversinglabs_scan.yaml
+      - name: RL scan image (rl-submit-only)
+        env:
+          RLPORTAL_ACCESS_TOKEN: ${{ secrets.RLPORTAL_ACCESS_TOKEN }}
+        uses: reversinglabs/gh-action-rl-scanner-cloud-only@v1
         with:
-          artifact-name: ${{ env.artifact-name }}
-          package-name: apm-python-autoinstrumentation-image-ghcr
-          version: ${{ env.VERSION }}
+          artifact-to-scan: ${{ env.artifact-name }}
           rl-submit-only: true
+          rl-verbose: true
+          rl-portal-server: solarwinds
+          rl-portal-org: SolarWinds
+          rl-portal-group: "SaaS-Agents-SWO"
+          rl-package-url: apm-python/apm-python-autoinstrumentation-image-ghcr@${{ env.VERSION }}
 
       - name: Push image
         uses: docker/build-push-action@v6
@@ -100,13 +105,18 @@ jobs:
       - name: Set artifact name
         run: echo "artifact-name=ghcr.io/${{ github.repository_owner }}/autoinstrumentation-python:${{ env.VERSION }}" >> $GITHUB_ENV
 
-      - name: RL scan image
-        uses: ./.github/workflows/reversinglabs_scan.yaml
+      - name: RL scan image (rl-submit-only)
+        env:
+          RLPORTAL_ACCESS_TOKEN: ${{ secrets.RLPORTAL_ACCESS_TOKEN }}
+        uses: reversinglabs/gh-action-rl-scanner-cloud-only@v1
         with:
-          artifact-name: ${{ env.artifact-name }}
-          package-name: apm-python-autoinstrumentation-image-ghcr
-          version: ${{ env.VERSION }}
+          artifact-to-scan: ${{ env.artifact-name }}
           rl-submit-only: true
+          rl-verbose: true
+          rl-portal-server: solarwinds
+          rl-portal-org: SolarWinds
+          rl-portal-group: "SaaS-Agents-SWO"
+          rl-package-url: apm-python/apm-python-autoinstrumentation-image-ghcr@${{ env.VERSION }}
 
       - name: Push image
         uses: docker/build-push-action@v6