diff --git a/trivy.yaml b/trivy.yaml
index 5e4f10b4..41c9c8a1 100644
--- a/trivy.yaml
+++ b/trivy.yaml
@@ -12,6 +12,8 @@ severity:
 vulnerability:
   ignore-unfixed: false
 
+format: json
+output: '/github/workspace/trivy-results.json'
+exit-code: 1
 timeout: 10m
 debug: true
-exit-code: 1