We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6e33077 commit 3c30c77Copy full SHA for 3c30c77
.github/workflows/build-and-release.yaml
@@ -183,14 +183,16 @@ jobs:
183
cache-db: true
184
image: "ghcr.io/${{ github.repository }}:${{ github.sha }}"
185
output-file: grype.sarif
186
- severity-cutoff: critical # TODO: lower this once vulns are fixed
+ severity-cutoff: high
187
- name: Upload SARIF file
188
uses: github/codeql-action/upload-sarif@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
189
with:
190
sarif_file: grype.sarif
191
- name: Check success or failure
192
if: ${{ steps.scan.outcome == 'failure' }}
193
- run: exit 1
+ run: |-
194
+ cat grype.sarif
195
+ exit 1
196
197
- name: Push to registry (proper)
198
if: ${{ inputs.push-container-image }}
0 commit comments