#!/usr/bin/env bash
set -euo pipefail

ARTIFACT_DIR="${1:-./dist}"

trivy fs   --scanners vuln,secret,misconfig   --severity HIGH,CRITICAL   --format table   "${ARTIFACT_DIR}"

trivy fs   --scanners vuln,secret,misconfig   --severity HIGH,CRITICAL   --format json   --output trivy-dist-report.json   "${ARTIFACT_DIR}"