fix: do not fail on cve, upload sarif

Signed-off-by: Robert Waffen <[email protected]>
voxpupuli · Aug 30, 2024 · 1e45102 · 1e45102
1 parent 6ab3c16
commit 1e45102
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/container_scanning.yml b/.github/workflows/container_scanning.yml
@@ -46,5 +46,15 @@ jobs:
 
       - name: Scan image with Anchore Grype
         uses: anchore/scan-action@v3
+        id: scan
         with:
           image: 'ci/test:${{ matrix.puppet_release }}'
+          fail-build: false
+
+      - name: Inspect action SARIF report
+        run: jq . ${{ steps.scan.outputs.sarif }}
+
+      - name: Upload Anchore scan SARIF report
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: ${{ steps.scan.outputs.sarif }}