ci(grype): fail-build-pr-only

yxtay · yxtay · commit ddc3881546c5 · 2025-08-11T23:18:22.000+08:00
diff --git a/.github/workflows/scans.yml b/.github/workflows/scans.yml
@@ -125,6 +125,7 @@ jobs:
         uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e # v6
         with:
           path: .
+          fail-build: ${{ github.event_name == 'pull_request' }}
           severity-cutoff: high
           only-fixed: true
 
@@ -154,6 +155,7 @@ jobs:
         uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e # v6
         with:
           image: ${{ env.IMAGE_ID }}
+          fail-build: ${{ github.event_name == 'pull_request' }}
           severity-cutoff: high
           only-fixed: true
         env:
