fix: restore scanReport output

.github/workflows/ci-scan.yaml

@@ -25,6 +25,20 @@ jobs:
           stop-on-processing-error: true
           severity-at-least: medium
 
+      - name: Verify scanReport output is set and valid
+        if: success() || failure()
+        run: |
+          REPORT="${{ steps.scan.outputs.scanReport }}"
+          if [ -z "$REPORT" ]; then
+            echo "scanReport output is empty."
+            exit 1
+          fi
+          if [ ! -f "$REPORT" ]; then
+            echo "scanReport file does not exist: $REPORT"
+            exit 1
+          fi
+          echo "scanReport output OK: $REPORT"
+
       - name: Upload SARIF file
         if: success() || failure() # Upload results regardless previous step fails
         uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

package.json

@@ -1,6 +1,6 @@
 {
   "name": "secure-inline-scan-action",
-  "version": "6.3.4",
+  "version": "6.3.5",
   "description": "This actions performs image analysis on locally built container image and posts the result of the analysis to Sysdig Secure.",
   "main": "index.js",
   "scripts": {

src/infrastructure/sysdig/SysdigCliScanner.ts

@@ -76,6 +76,7 @@ export class SysdigCliScanner implements IScanner {
     // VM mode: Parse JSON output
     if (retCode == 0 || retCode == 1) {
       await exec.exec(`cat ./${cliScannerResult}`, undefined, catOptions);
+      core.setOutput("scanReport", `./${cliScannerResult}`);
     }
 
     try {