diff --git a/container-scan.gitlab-ci.yml b/container-scan.gitlab-ci.yml index 1f92727..dd92554 100644 --- a/container-scan.gitlab-ci.yml +++ b/container-scan.gitlab-ci.yml @@ -35,8 +35,9 @@ - tar zxvf trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz script: - /kaniko/executor --context $CONTEXT_LOCATION --dockerfile $DOCKERFILE_LOCATION --cache-dir cache/image --tarPath image.tar --no-push --destination image --skip-tls-verify + - echo $IGNORE_UNFIXABLE - | - if [ $IGNORE_UNFIXED = "true" ] ; then + if [[ $IGNORE_UNFIXED = "true" ]] ; then echo "detect issues, ignore unfixed issues"; ./trivy --cache-dir .trivycache/ --ignore-unfixed --exit-code 0 --cache-dir .trivycache/ --severity HIGH,CRITICAL --no-progress --format template --template "@contrib/junit.tpl" -o junit-report.xml --input image.tar ./trivy --cache-dir .trivycache/ --ignore-unfixed --exit-code $EXITCODE --severity HIGH,CRITICAL --no-progress --auto-refresh --input image.tar