Fail in case of vulnerabilities

Signed-off-by: tdruez <[email protected]>

Author: tdruez

.github/workflows/find-vulnerabilities.yml

@@ -18,3 +18,9 @@ jobs:
           pipelines: "inspect_packages:StaticResolver,find_vulnerabilities"
         env:
           VULNERABLECODE_URL: https://public.vulnerablecode.io/
+
+      - name: Fail in case of vulnerabilities
+        shell: bash
+        run: |
+          scanpipe shell --command \
+          'from scanpipe.models import Project; project = Project.objects.get(name=${{ inputs.project-name }}); vulnerability_count = project.discoveredpackages.vulnerable().count() + project.discovereddependencies.vulnerable().count(); print(vulnerability_count, "vulnerabilities found"); exit(1) if vulnerability_count else exit(0);'