ci(docker): fail push when trivy finds CRITICAL/HIGH issues

2026-06-04 18:23:59 +08:00 · 2026-04-16 23:01:09 +08:00
parent f06dda2b3e
commit 256ad7447c
1 changed files with 1 additions and 1 deletions
@@ -82,7 +82,7 @@ jobs:
          format: "sarif"
          output: "trivy-image-results.sarif"
          severity: "CRITICAL,HIGH"
-
+          exit-code: '1'
      - name: Upload Trivy scan results to GitHub Security tab
        uses: github/codeql-action/upload-sarif@v4
        if: always()