File tree Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -274,7 +274,7 @@ jobs:
274274 # This should be reverted when it's decided to filter high level CVEs as well.
275275 - name : Append dirty images to push list
276276 run : |
277- cat image-build-logs/image-scan-output/dirty -images.txt >> image-build-logs/push-attempt-images.txt
277+ cat image-build-logs/image-scan-output/high -images.txt >> image-build-logs/push-attempt-images.txt
278278 if : ${{ inputs.push }}
279279
280280 - name : Append images with critical vulnerabilities to push list
@@ -329,7 +329,7 @@ jobs:
329329 # This can be used again instead of "Fail when critical vulnerabilities are found" when it's
330330 # decided to fail the job on detecting high CVEs as well.
331331 # - name: Fail when images failed scanning
332- # run: if [ $(wc -l < image-build-logs/image-scan-output/dirty -images.txt) -gt 0 ]; then cat image-build-logs/image-scan-output/dirty -images.txt && exit 1; fi
332+ # run: if [ $(wc -l < image-build-logs/image-scan-output/high -images.txt) -gt 0 ]; then cat image-build-logs/image-scan-output/high -images.txt && exit 1; fi
333333 # if: ${{ !inputs.push-dirty && !cancelled() }}
334334
335335 - name : Fail when critical vulnerabilities are found
Original file line number Diff line number Diff line change @@ -35,7 +35,7 @@ check_deps_installed() {
3535file_prep () {
3636 rm -rf image-scan-output
3737 mkdir -p image-scan-output
38- touch image-scan-output/clean-images.txt image-scan-output/dirty -images.txt image-scan-output/critical-images.txt
38+ touch image-scan-output/clean-images.txt image-scan-output/high -images.txt image-scan-output/critical-images.txt
3939}
4040
4141# Gather image lists
You can’t perform that action at this time.
0 commit comments