Commit d132235b authored by Federico Falconieri's avatar Federico Falconieri
Browse files

fix: adds GRYPE_EXTRA_ARGS variable

parent 45926e3b

docker/grype.yml

+2 −1
Original line number Diff line number Diff line
@@ -7,6 +7,7 @@ variables: 
  GRYPE_SCOPE: "Squashed"

  GRYPE_OUTPUT_FORMAT: "table"

  GRYPE_FAIL_ON: "medium"

  GRYPE_EXTRA_ARGS: ""



grype:

  image: registry.gitlab.com/just-ci/images/grype:latest
@@ -20,4 +21,4 @@ grype: 
      echo "GRYPE_OUTPUT_FORMAT=${GRYPE_OUTPUT_FORMAT} report output formatter, options=[json table cyclonedx] (default 'table')"

      echo "GRYPE_FAIL_ON=${GRYPE_FAIL_ON} set the return code to 1 if a vulnerability is found with a severity >= the given severity, options=[negligible low medium high critical]"

    - grype version

    - grype --scope=${GRYPE_SCOPE} --fail-on=${GRYPE_FAIL_ON} --output=${GRYPE_OUTPUT_FORMAT} ${CI_PROJECT_DIR}/${CI_COMMIT_SHORT_SHA}
 
    - grype --scope=${GRYPE_SCOPE} --fail-on=${GRYPE_FAIL_ON} --output=${GRYPE_OUTPUT_FORMAT} ${GRYPE_EXTRA_ARGS} ${CI_PROJECT_DIR}/${CI_COMMIT_SHORT_SHA}