ZeroDownTime/KubeZero
3
0
Fork 0
Code Issues 1 Pull Requests 26 Packages Projects Releases Wiki Activity

feat: improve messaging if Trivy fail is skipped

Browse Source
This commit is contained in:
Stefan Reimer 2022-02-14 14:13:11 +01:00
parent 2c69869deb
commit 02e4ba85b2
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
vars/buildPodman.groovy
View File

@ -48,8 +48,14 @@ def call(Map config=[:]) {
reportTitles: 'TrivyScan'
]
// Scan again and fail on CRITICAL vulns
sh "[ \"${config.trivyFail}\" == \"NONE\" ] || TRIVY_EXIT_CODE=1 TRIVY_SEVERITY=${config.trivyFail} make scan"
// Scan again and fail on CRITICAL vulns, if not overridden
script {
if (config.trivyFail == 'NONE') {
echo 'trivyFail == NONE, review Trivy report manually. Proceeding ...'
} else {
sh "TRIVY_EXIT_CODE=1 TRIVY_SEVERITY=${config.trivyFail} make scan"
}
}
}
}