diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index 324392a..b6a1a0f 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -124,9 +124,9 @@ jobs: with: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} - # vulnerability-scan: - # uses: ./.github/workflows/scan.yml - # secrets: inherit + vulnerability-scan: + uses: ./.github/workflows/scan.yml + secrets: inherit build-and-push-image: runs-on: ubuntu-latest @@ -134,7 +134,7 @@ jobs: needs: - build - audit-licenses - # - vulnerability-scan + - vulnerability-scan permissions: contents: read id-token: write # This is used to complete the identity challenge with sigstore/fulcio..