Skip to content

Commit 3babea3

Browse files
fix: remove image scan by aws steps
1 parent ff8fe2f commit 3babea3

File tree

1 file changed

+1
-19
lines changed

1 file changed

+1
-19
lines changed

.github/workflows/build-docker-artifacts.yml

Lines changed: 1 addition & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -249,7 +249,7 @@ jobs:
249249
ignore-unfixed: false
250250
vuln-type: 'os,library'
251251
severity: 'MEDIUM,HIGH,CRITICAL'
252-
continue-on-error: true
252+
continue-on-error: false
253253

254254
- name: Push image
255255
uses: docker/build-push-action@v6
@@ -265,24 +265,6 @@ jobs:
265265
shell: bash
266266
run: docker logout ${{ steps.login-ecr.outputs.registry }}
267267

268-
- name: Scan image
269-
if: ${{ inputs.skip_image_scan != true && fromJson(vars.SKIP_IMAGE_SCAN || 'false') != true && matrix.component.skip_image_scan != true }}
270-
id: get-ecr-scan-result
271-
uses: ./tmp/github-workflows/.github/actions/get-ecr-scan-result
272-
with:
273-
aws_role: ${{ vars.DV_AWS_ECR_ROLE }}
274-
aws_region: ${{ vars.DV_AWS_REGION }}
275-
ecr_registry: ${{ vars.DV_AWS_ECR_REGISTRY }}
276-
ecr_repository: ${{ matrix.component.ecr_repository }}
277-
image_tag: ${{ matrix.component.image_tag }}
278-
- name: Check scan results
279-
if: ${{ inputs.skip_image_scan != true && fromJson(vars.SKIP_IMAGE_SCAN || 'false') != true && matrix.component.skip_image_scan != true }}
280-
run: |
281-
if [ "${{ steps.get-ecr-scan-result.outputs.critical }}" != "null" ] || [ "${{ steps.get-ecr-scan-result.outputs.high }}" != "null" ]; then
282-
echo "Docker image contains vulnerabilities at critical or high level"
283-
#exit 1 #exit execution due to docker image vulnerabilities
284-
fi
285-
286268
retag-images:
287269
name: Retag images of flavor ${{ matrix.flavor || 'default' }}
288270
needs: [get-flavors, build-flavors]

0 commit comments

Comments
 (0)