Skip to content

Commit 8296739

Browse files
committed
Use Snyk Docker for scanning alibi-detect
1 parent 3082b37 commit 8296739

File tree

1 file changed

+6
-20
lines changed

1 file changed

+6
-20
lines changed

.github/workflows/security_tests_python_v1.yml

Lines changed: 6 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -260,31 +260,17 @@ jobs:
260260

261261
- name: Free up space by removing the Docker Builder caches
262262
run: docker builder prune -af
263-
264-
- uses: snyk/actions/setup@master
265-
# Run Snyk container scan with the same flags you use today
266-
- name: Scan alibi detect (CLI mode)
263+
264+
- name: Scan alibi detect
267265
id: scan-alibi-detect
268266
if: steps.build-alibi-detect.outcome == 'success'
267+
uses: snyk/actions/docker@master
269268
continue-on-error: true
270269
env:
271270
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
272-
run: |
273-
snyk container test ${{ env.ALIBI_DETECT_IMAGE_TAG }}:test \
274-
--severity-threshold=high \
275-
--app-vulns \
276-
--fail-on=upgradable
277-
278-
# - name: Scan alibi detect
279-
# id: scan-alibi-detect
280-
# if: steps.build-alibi-detect.outcome == 'success'
281-
# uses: snyk/actions/docker@master
282-
# continue-on-error: true
283-
# env:
284-
# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
285-
# with:
286-
# image: ${{ env.ALIBI_DETECT_IMAGE_TAG}}:test
287-
# args: --fail-on=upgradable --app-vulns --severity-threshold=high
271+
with:
272+
image: ${{ env.ALIBI_DETECT_IMAGE_TAG}}:test
273+
args: --fail-on=upgradable --app-vulns --severity-threshold=high
288274

289275
- name: Save scan output to file
290276
run: echo "alibi_detect_RESULT=${{ steps.scan-alibi-detect.outcome }}" > "report-alibi-detect.txt"

0 commit comments

Comments
 (0)