Skip to content

Commit 02eddb3

Browse files
committed
ci: allow Trivy scan steps to fail without breaking the build
1 parent 2263bce commit 02eddb3

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

.github/workflows/maven-build.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,7 @@ jobs:
6666
6767
- name: Run Trivy vulnerability scanner (SARIF)
6868
if: github.event_name == 'push'
69+
continue-on-error: true
6970
uses: aquasecurity/trivy-action@v0.36.0
7071
with:
7172
scan-type: 'fs'
@@ -77,12 +78,14 @@ jobs:
7778

7879
- name: Upload Trivy scan results to GitHub Security tab
7980
if: github.event_name == 'push'
81+
continue-on-error: true
8082
uses: github/codeql-action/upload-sarif@v4
8183
with:
8284
sarif_file: 'trivy-results.sarif'
8385

8486
- name: Run Trivy vulnerability scanner (Table)
8587
if: github.event_name == 'pull_request'
88+
continue-on-error: true
8689
uses: aquasecurity/trivy-action@v0.36.0
8790
with:
8891
scan-type: 'fs'

0 commit comments

Comments
 (0)