@@ -165,14 +165,14 @@ Current runner version: '2.331.0'
165165Settings → Secrets and Variables → Actions → New repository secret
166166```
167167
168- Add the following secrets using the previously stored Docker Hub username and saved token from the previous section :
168+ Add the following secrets using your Docker Hub username Docker Hub generated personal access token with "RO" authorization :
169169
170- | Name | Value |
171- | ----------------- | ----------------------------------- |
172- | ` DOCKER_USERNAME ` | Your Docker Hub username |
173- | ` DOCKER_PASSWORD ` | Docker Hub password or access token |
174- | ` IMAGE_NAME ` | trivy-multiarch-nginx |
175- | ` IMAGE_TAG ` | latest |
170+ | Name | Value |
171+ | ----------------- | -------------------------------- |
172+ | ` DOCKER_USERNAME ` | Your Docker Hub username |
173+ | ` DOCKER_PASSWORD ` | Docker Hub personal access token |
174+ | ` IMAGE_NAME ` | trivy-multiarch-nginx |
175+ | ` IMAGE_TAG ` | latest |
176176
177177![ GitHub Actions secrets configuration#center] ( images/secrets.png " GitHub Secrets Configuration ")
178178
@@ -245,11 +245,17 @@ git commit -m "Add Trivy scan on Arm runner"
245245git push origin main
246246```
247247
248- Push triggers GitHub Actions automatically.
248+ Push triggers GitHub Actions automatically. You should also see output from the ./run.sh command running in the other SSH shell that resembles:
249+
250+ ``` output
251+ 026-02-17 16:09:52Z: Listening for Jobs
252+ 2026-02-17 16:15:27Z: Running job: security-scan
253+ 2026-02-17 16:15:35Z: Job security-scan completed with result: Failed
254+ ```
249255
250256## Verify CI Execution (Trivy Security Gate on Arm Runner)
251257
252- After pushing your code to GitHub, navigate to:
258+ After pushing your code to GitHub, on the github web dashboard, navigate to:
253259
254260``` text
255261GitHub → Actions → Trivy Scan on Arm Runner
0 commit comments