diff --git a/build/release.yml b/build/release.yml index 33b95e12..95a19fbb 100644 --- a/build/release.yml +++ b/build/release.yml @@ -137,27 +137,27 @@ steps: # on: # - success - # scan-image: - # stage: Build - # title: scan docker image - # image: quay.io/codefresh/snyk-cli:latest - # shell: bash - # environment: - # - SNYK_TOKEN=${{SNYK_TOKEN}} - # - LOCAL_IMAGE_REF=${{IMAGE_NAME}}:${{RELEASE_VER}} - # commands: - # - | - # snyk test --severity-threshold=${{SNYK_SEVERITY_THRESHOLD}} || fail=1 - # snyk container test --severity-threshold=${{SNYK_SEVERITY_THRESHOLD}} --file=Dockerfile ${LOCAL_IMAGE_REF} - # if [ "$fail" == "1" ]; then exit 1; fi - # when: - # steps: - # - name: build - # on: - # - success - # # - name: codegen - # # on: - # # - success + scan-image: + stage: Build + title: scan docker image + image: quay.io/codefresh/snyk-cli:latest + shell: bash + environment: + - SNYK_TOKEN=${{SNYK_TOKEN}} + - LOCAL_IMAGE_REF=${{IMAGE_NAME}}:${{RELEASE_VER}} + commands: + - | + snyk test --severity-threshold=${{SNYK_SEVERITY_THRESHOLD}} || fail=1 + snyk container test --severity-threshold=${{SNYK_SEVERITY_THRESHOLD}} --file=Dockerfile ${LOCAL_IMAGE_REF} + if [ "$fail" == "1" ]; then exit 1; fi + when: + steps: + - name: download_modules + on: + - success + # - name: codegen + # on: + # - success build_binaries: <<: *deps @@ -197,7 +197,7 @@ steps: delay: 1 when: steps: - - name: download_modules + - name: scan-image on: - success # - name: codegen