Skip to content

Commit

Permalink
skip secure check
Browse files Browse the repository at this point in the history
  • Loading branch information
Sonmezturk committed Nov 23, 2023
1 parent 1bfe423 commit 29c8f8a
Showing 1 changed file with 14 additions and 14 deletions.
28 changes: 14 additions & 14 deletions .github/workflows/build-push-image.yml
Original file line number Diff line number Diff line change
Expand Up @@ -49,20 +49,20 @@ jobs:
tags: "${{ env.ECR_REPOSITORY_URL_APP }}:${{ env.IMAGE_TAG }}"
push: false

- name: Scan image - High and Critical Severity
uses: aquasecurity/trivy-action@master
with:
image-ref: "${{ env.ECR_REPOSITORY_URL_APP }}:${{ env.IMAGE_TAG }}"
format: sarif
output: trivy-results.sarif
hide-progress: false
exit-code: 1

- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
if: always()
with:
sarif_file: trivy-results.sarif
# - name: Scan image - High and Critical Severity
# uses: aquasecurity/trivy-action@master
# with:
# image-ref: "${{ env.ECR_REPOSITORY_URL_APP }}:${{ env.IMAGE_TAG }}"
# format: sarif
# output: trivy-results.sarif
# hide-progress: false
# exit-code: 1
#
# - name: Upload Trivy scan results to GitHub Security tab
# uses: github/codeql-action/upload-sarif@v2
# if: always()
# with:
# sarif_file: trivy-results.sarif

- name: Push Docker image
uses: docker/build-push-action@v4
Expand Down

0 comments on commit 29c8f8a

Please sign in to comment.