ci(docker): fail push when trivy finds CRITICAL/HIGH issues

2026-06-04 10:15:02 +08:00 · 2026-04-16 23:01:05 +08:00
parent c885f9c805
commit 2e4860b70c
1 changed files with 1 additions and 1 deletions
@@ -76,7 +76,7 @@ jobs:
          format: "sarif"
          output: "trivy-image-results.sarif"
          severity: "CRITICAL,HIGH"
-
+          exit-code: '1'
      - name: Upload Trivy scan results to GitHub Security tab
        uses: github/codeql-action/upload-sarif@v4
        if: always()