From cbe296208993a83688a2cf43da59b6aeb949bd92 Mon Sep 17 00:00:00 2001 From: Jamie O'Meara Date: Wed, 19 May 2021 16:40:22 -0600 Subject: [PATCH] Update maven.yml --- .github/workflows/maven.yml | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index c7acfc7b6..abf791c55 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -73,17 +73,17 @@ jobs: run: | pack build ghcr.io/octodemo/spring-petclinic/spring-petclinic:${{ github.sha }} --builder paketobuildpacks/builder:base --env 'BP_JVM_VERSION=8.*' --tag ghcr.io/octodemo/spring-petclinic/spring-petclinic:latest --publish - - name: 🛡 Scan container image for vulnerabilities - uses: anchore/scan-action@v2 - id: scan - with: - image: "ghcr.io/octodemo/spring-petclinic/spring-petclinic:latest" - acs-report-enable: true +# - name: 🛡 Scan container image for vulnerabilities +# uses: anchore/scan-action@v2 +# id: scan +# with: +# image: "ghcr.io/octodemo/spring-petclinic/spring-petclinic:latest" +# acs-report-enable: true - - name: ⬆️ Upload Anchore scan SARIF report - uses: github/codeql-action/upload-sarif@v1 - with: - sarif_file: ${{ steps.scan.outputs.sarif }} + # - name: ⬆️ Upload Anchore scan SARIF report + # uses: github/codeql-action/upload-sarif@v1 + # with: + # sarif_file: ${{ steps.scan.outputs.sarif }} - name: 🚓 Run Snyk to check Docker image for vulnerabilities # Snyk can be used to break the build when it detects vulnerabilities.