From b2c5414602cb5d1ad2eedb047afc7c15253d8786 Mon Sep 17 00:00:00 2001 From: Graham McIntire Date: Wed, 9 Jul 2025 17:08:12 -0500 Subject: [PATCH] ci fixes --- .github/workflows/docker-security-scan.yml | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-security-scan.yml b/.github/workflows/docker-security-scan.yml index 8704c73..595943a 100644 --- a/.github/workflows/docker-security-scan.yml +++ b/.github/workflows/docker-security-scan.yml @@ -132,6 +132,9 @@ jobs: echo '```' >> security-summary.md cat app-packages.txt >> security-summary.md || echo "No application vulnerabilities report available" >> security-summary.md echo '```' >> security-summary.md + + # Also output to GitHub Actions summary + cat security-summary.md >> $GITHUB_STEP_SUMMARY - name: Upload security summary uses: actions/upload-artifact@v4 @@ -142,9 +145,18 @@ jobs: retention-days: 14 - name: Check for critical vulnerabilities + continue-on-error: true run: | if grep -q "CRITICAL" trivy-results.sarif; then - echo "Critical vulnerabilities found in the Docker image." - echo "Please review the scan results in the Security tab." + echo "::warning::Critical vulnerabilities found in the Docker image." + echo "Please review the scan results in the Security tab and the uploaded reports." + echo "" + echo "Summary of critical vulnerabilities:" + grep -A 5 -B 5 "CRITICAL" trivy-results.sarif | head -50 || true + echo "" + echo "For full details, check the Security tab and artifact reports." + # Exit with error code but continue-on-error will prevent workflow failure exit 1 + else + echo "No critical vulnerabilities found." fi