Skip to content

Commit 83f9d26

Browse files
committed
chore
1 parent 729e7b4 commit 83f9d26

File tree

1 file changed

+4
-6
lines changed

1 file changed

+4
-6
lines changed

.github/workflows/ci.yml

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -104,25 +104,22 @@ jobs:
104104
- name: Run tests
105105
run: echo "Running tests..."
106106

107-
- name: Build for scout
108-
id: build-for-scout
107+
- name: Build for analysis
108+
id: build-for-analysis
109109
if: ${{ github.event_name == 'pull_request' }}
110110
uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
111111
with:
112112
context: ./nestjs-project
113113
file: ./nestjs-project/Dockerfile.prod
114114
push: false
115-
outputs: type=cacheonly
115+
load: true
116116
tags: ${{ steps.meta.outputs.tags }}
117117
labels: ${{ steps.meta.outputs.labels }}
118118
cache-from: type=gha
119119
cache-to: type=gha,mode=max
120120
secrets: |
121121
github_token=${{ secrets.GITHUB_TOKEN }}
122-
provenance: mode=max
123-
sbom: true
124122
125-
126123
- name: Analyze for critical and high CVEs
127124
id: docker-scout-cves
128125
uses: docker/scout-action@v1
@@ -177,6 +174,7 @@ jobs:
177174
secrets: |
178175
github_token=${{ secrets.GITHUB_TOKEN }}
179176
177+
180178

181179
# Sign the resulting Docker image digest except on PRs.
182180
# This will only write to the public Rekor transparency log when the Docker

0 commit comments

Comments
 (0)