@@ -249,7 +249,7 @@ jobs:
249249 ignore-unfixed : false
250250 vuln-type : ' os,library'
251251 severity : ' MEDIUM,HIGH,CRITICAL'
252- continue-on-error : true
252+ continue-on-error : false
253253
254254 - name : Push image
255255 uses : docker/build-push-action@v6
@@ -265,24 +265,6 @@ jobs:
265265 shell : bash
266266 run : docker logout ${{ steps.login-ecr.outputs.registry }}
267267
268- - name : Scan image
269- if : ${{ inputs.skip_image_scan != true && fromJson(vars.SKIP_IMAGE_SCAN || 'false') != true && matrix.component.skip_image_scan != true }}
270- id : get-ecr-scan-result
271- uses : ./tmp/github-workflows/.github/actions/get-ecr-scan-result
272- with :
273- aws_role : ${{ vars.DV_AWS_ECR_ROLE }}
274- aws_region : ${{ vars.DV_AWS_REGION }}
275- ecr_registry : ${{ vars.DV_AWS_ECR_REGISTRY }}
276- ecr_repository : ${{ matrix.component.ecr_repository }}
277- image_tag : ${{ matrix.component.image_tag }}
278- - name : Check scan results
279- if : ${{ inputs.skip_image_scan != true && fromJson(vars.SKIP_IMAGE_SCAN || 'false') != true && matrix.component.skip_image_scan != true }}
280- run : |
281- if [ "${{ steps.get-ecr-scan-result.outputs.critical }}" != "null" ] || [ "${{ steps.get-ecr-scan-result.outputs.high }}" != "null" ]; then
282- echo "Docker image contains vulnerabilities at critical or high level"
283- #exit 1 #exit execution due to docker image vulnerabilities
284- fi
285-
286268 retag-images :
287269 name : Retag images of flavor ${{ matrix.flavor || 'default' }}
288270 needs : [get-flavors, build-flavors]
0 commit comments