all: skip issues with low severity at docker scan

This commit is contained in:
Aliaksandr Valialkin 2023-02-09 14:25:01 -08:00
parent 34379d4cf1
commit d02146663b
No known key found for this signature in database
GPG key ID: A72BEC6CD3D0DED1

View file

@ -17,7 +17,7 @@ package-base:
deployment/docker/base
docker-scan: package-base
docker scan --accept-license $(BASE_IMAGE) || (echo "❌ The build has been terminated because critical vulnerabilities were found in $(BASE_IMAGE)"; exit 1)
docker scan --severity=medium --accept-license $(BASE_IMAGE) || (echo "❌ The build has been terminated because critical vulnerabilities were found in $(BASE_IMAGE)"; exit 1)
package-builder:
(docker image ls --format '{{.Repository}}:{{.Tag}}' | grep -q '$(BUILDER_IMAGE)$$') \