Separate stages

This commit is contained in:
Daan Selen
2025-06-04 10:12:18 +02:00
parent 249ae584c3
commit 15c12a81f1
2 changed files with 23 additions and 56 deletions

View File

@@ -64,23 +64,27 @@ jobs:
labels: ${{ steps.meta.outputs.labels }}
platforms: linux/amd64,linux/arm64,linux/arm/v7
- name: Docker Scout CVEs
uses: docker/scout-action@v1
with:
command: cves
image: ${{ steps.meta.outputs.tags }}
only-severities: critical,high
only-fixed: true
write-comment: true
github-token: ${{ secrets.GITHUB_TOKEN }}
exit-code: true
docker_scan:
runs-on: ubuntu-latest
needs: docker_build
steps:
- name: Docker Scout CVEs
uses: docker/scout-action@v1
with:
command: cves
image: ${{ needs.docker_build.outputs.image-tags }}
only-severities: critical,high
only-fixed: true
write-comment: true
github-token: ${{ secrets.GITHUB_TOKEN }}
exit-code: true
- name: Docker Scout Compare
uses: docker/scout-action@v1
with:
command: compare
image: ${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}:nightly
to: ${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}:latest
only-severities: critical,high
ignore-unchanged: true
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Docker Scout Compare
uses: docker/scout-action@v1
with:
command: compare
image: ${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}:nightly
to: ${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}:latest
only-severities: critical,high
ignore-unchanged: true
github-token: ${{ secrets.GITHUB_TOKEN }}