Skip to content

Commit

Permalink
Merge pull request #1308 from znsio/fail_docker_scan_for_high_vul
Browse files Browse the repository at this point in the history
Vulnerability Scan stage for docker should fail for HIGH/CRITICAL
  • Loading branch information
joelrosario authored Sep 25, 2024
2 parents e6f5106 + 6860fea commit 7a7faec
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion .github/workflows/docker.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
name: Manual Release Build and Docker Image

on:
repository_dispatch:
types: [specmatic-core-release]
workflow_dispatch:

jobs:
Expand Down Expand Up @@ -41,7 +43,11 @@ jobs:
uses: aquasecurity/trivy-action@0.24.0
with:
image-ref: znsio/specmatic:${{ steps.read_version.outputs.VERSION }}
continue-on-error: true
severity: HIGH,CRITICAL
exit-code: '1'
ignore-unfixed: true
format: table
vulnerability-type: os,library

- name: Push Docker Image
run: docker push znsio/specmatic:${{ steps.read_version.outputs.VERSION }}
Expand Down

0 comments on commit 7a7faec

Please sign in to comment.