ci(docker): fail push when trivy finds CRITICAL/HIGH issues

2026-06-04 10:14:50 +08:00 · 2026-04-16 23:01:15 +08:00
parent 6379123ca3
commit d746084872
1 changed files with 1 additions and 1 deletions
@@ -83,7 +83,7 @@ jobs:
          format: "sarif"
          output: "trivy-image-results.sarif"
          severity: "CRITICAL,HIGH"
-
+          exit-code: '1'
      - name: Upload Trivy scan results to GitHub Security tab
        uses: github/codeql-action/upload-sarif@v4
        if: always()