mirror of
https://github.com/dangeroustech/ZeroTierBridge.git
synced 2025-12-06 00:56:58 +00:00
fix: only alert on CVEs that have a fix
This commit is contained in:
3
.github/workflows/docker-build.yml
vendored
3
.github/workflows/docker-build.yml
vendored
@@ -50,7 +50,10 @@ jobs:
|
||||
id: scan
|
||||
with:
|
||||
sbom: sbom.spdx.json
|
||||
severity-cutoff: high
|
||||
fail-build: false
|
||||
only-fixed: true
|
||||
by-cve: true
|
||||
|
||||
- name: upload Anchore scan SARIF report
|
||||
uses: github/codeql-action/upload-sarif@v2
|
||||
|
||||
Reference in New Issue
Block a user