From f28477403ee2f40a75fbd88e405b05826092c610 Mon Sep 17 00:00:00 2001 From: Guilherme Caponetto <638737+caponetto@users.noreply.github.com> Date: Thu, 11 Jul 2024 06:29:00 -0300 Subject: [PATCH] Enable all types of severity on the daily report too --- .github/workflows/build-notebooks-TEMPLATE.yaml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/.github/workflows/build-notebooks-TEMPLATE.yaml b/.github/workflows/build-notebooks-TEMPLATE.yaml index ceacbdd1f..5348bbdbd 100644 --- a/.github/workflows/build-notebooks-TEMPLATE.yaml +++ b/.github/workflows/build-notebooks-TEMPLATE.yaml @@ -168,12 +168,6 @@ jobs: IMAGE_NAME=${{ steps.resolve-image.outputs.image }} echo "Scanning $IMAGE_NAME" - SEVERITY_OPTION="" - # Report only higher vulnerabilities if not a pull request - if [ "${{ fromJson(inputs.github).event_name }}" != "pull_request" ]; then - SEVERITY_OPTION="--severity CRITICAL,HIGH" - fi - # have trivy access podman socket, # https://github.com/aquasecurity/trivy/issues/580#issuecomment-666423279 podman run --rm \ @@ -185,7 +179,6 @@ jobs: --podman-host /var/run/podman/podman.sock \ --scanners vuln --ignore-unfixed \ --exit-code 0 --timeout 30m \ - $SEVERITY_OPTION \ --format template --template "@/report/$REPORT_TEMPLATE" -o /report/$REPORT_FILE \ $IMAGE_NAME