Update vulnerability-scan.yml

Author: swmal

.github/workflows/vulnerability-scan.yml

@@ -49,7 +49,10 @@ jobs:
           exit 1
         fi
 
-        echo "Scan started with ID $SCAN_ID"
+        SCAN_DB_ID=$(jq -r '.scanDbId' response.json)
+        echo "SCAN_DB_ID=$SCAN_DB_ID" >> $GITHUB_ENV
+
+        echo "Scan started with ID $SCAN_ID (db id: $SCAN_DB_ID)"
         cat response.json
 
     - name: Scan each SBOM
@@ -128,7 +131,7 @@ jobs:
 
             echo "--- Indexing EPPlus $version / $tfm ---"
             response=$(curl -s -o response.json -w "%{http_code}" \
-              -X POST "https://epplussoftware.com/api/security/vulnerability/index/${version}?tfm=${tfm}&scanId=${SCAN_ID}" \
+              -X POST "https://epplussoftware.com/api/security/vulnerability/index/${version}?tfm=${tfm}&scanId=${SCAN_DB_ID}" \
               -H "X-Api-Key: ${{ secrets.EPPLUS_VULNERABILITY_API_KEY }}" \
               -H "Content-Type: application/json" \
               -d @"./reports/${version}/${tfm}/report.json")