Ignore failure offlaky vulnerability scan

EnricoMi · Nov 4, 2024 · 0bce8a1 · 0bce8a1
1 parent 170bf24
commit 0bce8a1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -202,11 +202,13 @@ jobs:
       - name: Scan for vulnerabilities
         id: scan
         uses: crazy-max/ghaction-container-scan@v3
+        continue-on-error: true
         with:
           image: enricomi/publish-unit-test-result-action:latest
           dockerfile: ./Dockerfile
           annotations: true
       - name: Upload SARIF artifact
+        if: steps.scan.outcome == 'success'
         uses: actions/upload-artifact@v4
         with:
           name: SARIF ${{ matrix.arch }}