Skip to content

Commit b60840a

Browse files
fix: readd skip_image_scan
1 parent 703e99b commit b60840a

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

.github/workflows/build-docker-artifacts-config.schema.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,11 @@
3535
"type": "string",
3636
"description": "ECR repository to push the image to"
3737
},
38+
"skip_image_scan": {
39+
"type": "boolean",
40+
"default": false,
41+
"description": "[Deprecated: use scan_high_severity or the .trivyignore file instead] Skip scanning the image for vulnerabilities"
42+
},
3843
"scan_high_severity": {
3944
"type": "boolean",
4045
"default": true,

.github/workflows/build-docker-artifacts.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,10 @@ on:
2222
type: boolean
2323
required: false
2424
default: true
25+
skip_image_scan:
26+
type: boolean
27+
required: false
28+
default: false
2529
scan_high_severity:
2630
description: 'Include high severity'
2731
type: boolean
@@ -252,6 +256,7 @@ jobs:
252256
echo "severity=HIGH,CRITICAL" >> "$GITHUB_OUTPUT"
253257
fi
254258
- name: Run Trivy vulnerability scanner
259+
if: ${{ inputs.skip_image_scan != true && fromJson(vars.SKIP_IMAGE_SCAN || 'false') != true && matrix.component.skip_image_scan != true }}
255260
uses: aquasecurity/[email protected]
256261
with:
257262
image-ref: ${{ vars.DV_AWS_ECR_REGISTRY }}/${{ matrix.component.ecr_repository }}:${{ matrix.component.image_tag }}

0 commit comments

Comments
 (0)