Skip to content

Commit dc5f0c9

Browse files
authored
Only check for critical vulnerabilities
1 parent 8f53837 commit dc5f0c9

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

.github/actions/build-node-python/action.yml

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -298,10 +298,9 @@ runs:
298298
with:
299299
scan-type: "fs"
300300
scan-ref: "uv.lock"
301-
format: "table"
302301
exit-code: "1"
303302
scaners: "vuln"
304-
severity: "HIGH,CRITICAL"
303+
severity: "CRITICAL" # HIGH,CRITICAL may be too strict
305304
ignore-unfixed: false
306305
# The cache update takes quite long, so let's try to disable it for now: https://github.com/aquasecurity/trivy-action#cache
307306
cache: "false"
@@ -312,10 +311,9 @@ runs:
312311
with:
313312
scan-type: "fs"
314313
scan-ref: "yarn.lock"
315-
format: "table"
316314
exit-code: "1"
317315
scaners: "vuln"
318-
severity: "HIGH,CRITICAL"
316+
severity: "CRITICAL" # HIGH,CRITICAL may be too strict
319317
ignore-unfixed: false
320318
# The cache update takes quite long, so let's try to disable it for now: https://github.com/aquasecurity/trivy-action#cache
321319
cache: "false"

0 commit comments

Comments
 (0)