File tree Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -274,7 +274,7 @@ jobs:
274
274
# This should be reverted when it's decided to filter high level CVEs as well.
275
275
- name : Append dirty images to push list
276
276
run : |
277
- cat image-build-logs/image-scan-output/dirty -images.txt >> image-build-logs/push-attempt-images.txt
277
+ cat image-build-logs/image-scan-output/high -images.txt >> image-build-logs/push-attempt-images.txt
278
278
if : ${{ inputs.push }}
279
279
280
280
- name : Append images with critical vulnerabilities to push list
@@ -329,7 +329,7 @@ jobs:
329
329
# This can be used again instead of "Fail when critical vulnerabilities are found" when it's
330
330
# decided to fail the job on detecting high CVEs as well.
331
331
# - name: Fail when images failed scanning
332
- # run: if [ $(wc -l < image-build-logs/image-scan-output/dirty -images.txt) -gt 0 ]; then cat image-build-logs/image-scan-output/dirty -images.txt && exit 1; fi
332
+ # run: if [ $(wc -l < image-build-logs/image-scan-output/high -images.txt) -gt 0 ]; then cat image-build-logs/image-scan-output/high -images.txt && exit 1; fi
333
333
# if: ${{ !inputs.push-dirty && !cancelled() }}
334
334
335
335
- name : Fail when critical vulnerabilities are found
Original file line number Diff line number Diff line change @@ -35,7 +35,7 @@ check_deps_installed() {
35
35
file_prep () {
36
36
rm -rf image-scan-output
37
37
mkdir -p image-scan-output
38
- touch image-scan-output/clean-images.txt image-scan-output/dirty -images.txt image-scan-output/critical-images.txt
38
+ touch image-scan-output/clean-images.txt image-scan-output/high -images.txt image-scan-output/critical-images.txt
39
39
}
40
40
41
41
# Gather image lists
You can’t perform that action at this time.
0 commit comments