Merge branch 'suppress-vulns' into 'master'

add ENV variable to control security scans See merge request nvidia/kubernetes/device-plugin!66
NVIDIA · Dec 14, 2020 · 46113e2 · 46113e2
2 parents effe0dd + cd3a346
commit 46113e2
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.nvidia-ci.yml b/.nvidia-ci.yml
@@ -83,9 +83,9 @@ stages:
   - git clone https://gitlab-ci-token:${CI_JOB_TOKEN}@gitlab-master.nvidia.com/sectooling/scanning/contamer.git
   - cd contamer
   - pip3 install -r requirements.txt
-  - python3 contamer.py -ls --fail-on-non-os ${CI_PROJECT_NAME}:${CI_COMMIT_SHA}-ubuntu16.04
-  - python3 contamer.py -ls --fail-on-non-os ${CI_PROJECT_NAME}:${CI_COMMIT_SHA}-centos7
-  - python3 contamer.py -ls --fail-on-non-os --suppress-vulns CVE-2020-14352 CVE-2020-15888 -- ${CI_PROJECT_NAME}:${CI_COMMIT_SHA}-ubi8
+  - python3 contamer.py -ls --fail-on-non-os ${CONTAMER_SUPPRESS_VULNS:+--suppress-vulns ${CONTAMER_SUPPRESS_VULNS}}-- ${CI_PROJECT_NAME}:${CI_COMMIT_SHA}-ubuntu16.04
+  - python3 contamer.py -ls --fail-on-non-os ${CONTAMER_SUPPRESS_VULNS:+--suppress-vulns ${CONTAMER_SUPPRESS_VULNS}}-- ${CI_PROJECT_NAME}:${CI_COMMIT_SHA}-centos7
+  - python3 contamer.py -ls --fail-on-non-os ${CONTAMER_SUPPRESS_VULNS:+--suppress-vulns ${CONTAMER_SUPPRESS_VULNS}} -- ${CI_PROJECT_NAME}:${CI_COMMIT_SHA}-ubi8
 
 .release_action: &release_action
   - make IMAGE="${NGC_REGISTRY_IMAGE}" VERSION="${CI_COMMIT_TAG}" all