Adding fail on scan
This commit is contained in:
parent
16f8a4f21f
commit
91845516ad
5
.github/workflows/base-build-image.yml
vendored
5
.github/workflows/base-build-image.yml
vendored
@ -6,6 +6,9 @@ on:
|
|||||||
image_tag:
|
image_tag:
|
||||||
required: true
|
required: true
|
||||||
type: string
|
type: string
|
||||||
|
fail_on_scan:
|
||||||
|
default: true
|
||||||
|
type: boolean
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
docker-build-and-push:
|
docker-build-and-push:
|
||||||
@ -52,7 +55,7 @@ jobs:
|
|||||||
output-format: table
|
output-format: table
|
||||||
only-fixed: true
|
only-fixed: true
|
||||||
severity-cutoff: critical
|
severity-cutoff: critical
|
||||||
fail-build: true
|
fail-build: ${{ inputs.fail_on_scan }}
|
||||||
|
|
||||||
- name: Push the container image
|
- name: Push the container image
|
||||||
run: docker push ${{ steps.get-id.outputs.DOCKER_IMAGE }}
|
run: docker push ${{ steps.get-id.outputs.DOCKER_IMAGE }}
|
||||||
|
|||||||
@ -15,4 +15,5 @@ jobs:
|
|||||||
secrets: inherit
|
secrets: inherit
|
||||||
with:
|
with:
|
||||||
image_tag: ${{ github.ref_name }}-v1 #Generally becomes basin:node-22-dev-v1
|
image_tag: ${{ github.ref_name }}-v1 #Generally becomes basin:node-22-dev-v1
|
||||||
|
fail_on_scan: true
|
||||||
#To be updated in the code repo as per requirement
|
#To be updated in the code repo as per requirement
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user