feat: make trivy scan cause build to fail configurable

2022-02-14 12:52:49 +01:00 · 2022-02-14 12:52:49 +01:00 · 5823b8b0a7
commit 5823b8b0a7
parent a4c2a55289
1 changed files with 1 additions and 1 deletions
--- a/vars/buildPodman.groovy
+++ b/vars/buildPodman.groovy
@ -49,7 +49,7 @@ def call(Map config) {
            ]

            // Scan again and fail on CRITICAL vulns
-            sh 'TRIVY_EXIT_CODE=1 TRIVY_SEVERITY=CRITICAL make scan'
+            sh '[ "${config.trivyFail}" == "NONE" ] || TRIVY_EXIT_CODE=1 TRIVY_SEVERITY=${config.trivyFail} make scan'
          }
        }