Commit ca3c7877 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

Merge branch... 

Merge branch '62-docker-trivy-job-does-not-fail-when-scanning-an-image-that-has-reached-eol' into 'master'

Resolve "docker-trivy job does not fail when scanning an image that has reached EOL"

Closes #62

See merge request to-be-continuous/docker!90
parents 3d9a0a06 b89f06e5

templates/gitlab-ci-docker.yml

+1 −1
Original line number Diff line number Diff line
@@ -83,7 +83,7 @@ variables: 


  DOCKER_TRIVY_SECURITY_LEVEL_THRESHOLD: "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL"

  DOCKER_TRIVY_IMAGE: "registry.hub.docker.com/aquasec/trivy:latest"

  DOCKER_TRIVY_ARGS: "--ignore-unfixed --vuln-type os"

  DOCKER_TRIVY_ARGS: "--ignore-unfixed --vuln-type os --exit-on-eol 1"



  # SBOM genenration image and arguments

  DOCKER_SBOM_IMAGE: "registry.hub.docker.com/anchore/syft:debug"