Fail trivy on critical, high issues

(cherry picked from commit 4495180f7b2666959ceee07558c8825a002b05f3)

.github/workflows/ci.yml

@@ -64,12 +64,14 @@ jobs:
           image-ref: ${{ github.repository }}:${{ github.run_id }}
           exit-code: '1'
           skip-files: '/etc/ssl/certs/vsftpd.pem'
+          severity: 'CRITICAL,HIGH'
 
       - name: Run Trivy vulnerability scanner.
         uses: aquasecurity/trivy-action@master
         with:
           image-ref: ${{ github.repository }}:nossl
           exit-code: '1'
+          severity: 'CRITICAL,HIGH'
 
   deploy:
     if: startsWith(github.ref, 'refs/tags/v')

Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.18.3
+FROM alpine:3.18.4
 
 LABEL maintainer="Amin Vakil <info@aminvakil.com>"
 

Dockerfile_nossl

@@ -1,4 +1,4 @@
-FROM alpine:3.18.3
+FROM alpine:3.18.4
 
 LABEL maintainer="Amin Vakil <info@aminvakil.com>"
 

README.md

@@ -26,7 +26,7 @@ docker run -d \
 Environment variables:
 - `USERS` - space and `|` separated list (optional, default: `alpineftp|alpineftp`)
   - format `name1|password1|[folder1][|uid1] name2|password2|[folder2][|uid2]`
-- `ADDRESS` - external address witch clients can connect passive ports (optional, should resolve to ftp server ip address)
+- `ADDRESS` - external address to which clients can connect for passive ports (optional, should resolve to ftp server ip address)
 - `MIN_PORT` - minimum port number to be used for passive connections (optional, default `21000`)
 - `MAX_PORT` - maximum port number to be used for passive connections (optional, default `21010`)