From 4bcf19b81911277d913d136e91cfee23b5a84c02 Mon Sep 17 00:00:00 2001 From: TomacGG <516768@student.saxion.nl> Date: Tue, 17 Sep 2024 14:20:02 +0200 Subject: [PATCH] Change build.yaml --- .github/workflows/build.yaml | 46 ++++++++++++++++++------------------ 1 file changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 7c2c489..07c0488 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -29,29 +29,29 @@ jobs: tags: | tomacgg/devops-security-app:latest -scan: - name: Scan - needs: [ build ] - runs-on: ubuntu-latest - steps: - - name: Login to Docker Hub - uses: docker/login-action@v2 - with: - username: ${{ secrets.DOCKERHUB_USERNAME }} - password: ${{ secrets.DOCKERHUB_TOKEN }} - - name: Docker Scout CVEs - uses: docker/scout-action@v1.5.0 - with: - command: cves - image: tomacgg/devops-security-app:latest - # only-fixed: true - only-severities: critical,high - ignore-base: false - ignore-unchanged: false - write-comment: true - github-token: ${{ secrets. PERSONAL_ACCESS_TOKEN }} - exit-code: true - exit-on: vulnerability + scan: + name: Scan + needs: [ build ] + runs-on: ubuntu-latest + steps: + - name: Login to Docker Hub + uses: docker/login-action@v2 + with: + username: ${{ secrets.DOCKERHUB_USERNAME }} + password: ${{ secrets.DOCKERHUB_TOKEN }} + - name: Docker Scout CVEs + uses: docker/scout-action@v1.5.0 + with: + command: cves + image: tomacgg/devops-security-app:latest + # only-fixed: true + only-severities: critical,high + ignore-base: false + ignore-unchanged: false + write-comment: true + github-token: ${{ secrets. PERSONAL_ACCESS_TOKEN }} + exit-code: true + exit-on: vulnerability test: name: Test