Skip to content

Commit aa50728

Browse files
authored
Update anchore-analysis.yml
1 parent d7eb2a5 commit aa50728

File tree

1 file changed

+23
-23
lines changed

1 file changed

+23
-23
lines changed

.github/workflows/anchore-analysis.yml

+23-23
Original file line numberDiff line numberDiff line change
@@ -15,27 +15,27 @@
1515
# schedule:
1616
# - cron: '31 6 * * 0'
1717

18-
# jobs:
19-
# Anchore-Build-Scan:
20-
# runs-on: ubuntu-latest
21-
# steps:
22-
# - name: Checkout the code
23-
# uses: actions/checkout@v4
24-
# - name: Build the Docker image
25-
# run: docker build . --file Dockerfile --tag localbuild/testimage:latest
26-
# - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled
27-
# uses: anchore/scan-action@v5
28-
# id: scan
29-
# with:
30-
# image: "localbuild/testimage:latest"
31-
# fail-build: false
32-
# - name: Upload Anchore Scan Report
33-
# uses: github/codeql-action/upload-sarif@v3
34-
# with:
35-
# sarif_file: ${{ steps.scan.outputs.sarif }}
36-
# - name: Fail build if scan has vulns
37-
# uses: anchore/scan-action@v5
38-
# with:
39-
# image: "localbuild/testimage:latest"
40-
# severity-cutoff: critical
18+
jobs:
19+
Anchore-Build-Scan:
20+
runs-on: ubuntu-latest
21+
steps:
22+
- name: Checkout the code
23+
uses: actions/checkout@v4
24+
- name: Build the Docker image
25+
run: docker build . --file Dockerfile --tag localbuild/testimage:latest
26+
- name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled
27+
uses: anchore/scan-action@v5
28+
id: scan
29+
with:
30+
image: "localbuild/testimage:latest"
31+
fail-build: false
32+
- name: Upload Anchore Scan Report
33+
uses: github/codeql-action/upload-sarif@v3
34+
with:
35+
sarif_file: ${{ steps.scan.outputs.sarif }}
36+
- name: Fail build if scan has vulns
37+
uses: anchore/scan-action@v5
38+
with:
39+
image: "localbuild/testimage:latest"
40+
severity-cutoff: critical
4141

0 commit comments

Comments
 (0)