We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent f9103d8 commit 9e4001dCopy full SHA for 9e4001d
.github/workflows/security_tests_v1.yml
@@ -278,10 +278,18 @@ jobs:
278
echo "RCLONE_IMAGE_TAG=$RCLONE_IMAGE_TAG" >> $GITHUB_ENV
279
make IMAGE_TAG=$RCLONE_IMAGE_TAG docker-build
280
- name: Scan rclone
281
+ id: scan-rclone
282
uses: snyk/actions/docker@master
283
env:
284
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
285
with:
286
image: ${{ env.RCLONE_IMAGE_TAG}}
287
# TODO fix, passes even if CVEs found
288
args: --fail-on=upgradable --app-vulns --severity-threshold=high --file=components/rclone-storage-initializer/Dockerfile
289
+ - name: Check for image scan failures
290
+ if: always()
291
+ run: |
292
+ if [ "${{ steps.scan-rclone.outcome }}" != "success" ]; then
293
+ echo "Rclone docker image scan failed"
294
+ exit 1
295
+ fi
0 commit comments