From e6b163fdd58082bd71a2a845c389e766dc15381d Mon Sep 17 00:00:00 2001
From: Stefan Reimer <stefan@zero-downtime.net>
Date: Sun, 16 Jan 2022 00:35:26 +0100
Subject: [PATCH] fix: scan with actual tag rather than latest

---
 Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index a6496f9..a2493af 100644
--- a/Makefile
+++ b/Makefile
@@ -17,7 +17,7 @@ endif
 all: build
 
 build:
-	podman build --rm --squash-all --build-arg BASE=$(BASE) -t $(REPOSITORY):latest .
+	podman build --rm --squash-all --build-arg BASE=$(BASE) -t $(REPOSITORY):$(TAG) -t $(REPOSITORY):latest .
 
 push:
 	aws ecr-public get-login-password --region us-east-1 | podman login --username AWS --password-stdin $(REGISTRY)
@@ -26,4 +26,4 @@ push:
 	podman push $(REGISTRY)/$(REPOSITORY):latest
 
 scan:
-	trivy $(TRIVY_OPTS) $(TAG)
+	trivy $(TRIVY_OPTS) $(REPOSITORY):$(TAG)