💚[maykinmedia/objects-api#463] Temporarily disable Trivy in CI

open-zaak · Oct 4, 2024 · f7be44e · f7be44e
1 parent 4257c83
commit f7be44e
Showing 1 changed file with 22 additions and 22 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -124,28 +124,28 @@ jobs:
           path: image.tar
           retention-days: 1
 
-  image_scan:
-    runs-on: ubuntu-latest
-    name: Scan docker image
-    needs:
-      - docker
-
-    steps:
-      - name: Download built image
-        uses: actions/download-artifact@v4
-        with:
-          name: docker-image
-      - name: Scan image with Trivy
-        uses: aquasecurity/trivy-action@master
-        with:
-          input: /github/workspace/image.tar  # from download-artifact
-          format: 'sarif'
-          output: 'trivy-results-docker.sarif'
-          ignore-unfixed: true
-      - name: Upload results to GH Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'trivy-results-docker.sarif'
+#  image_scan:
+#    runs-on: ubuntu-latest
+#    name: Scan docker image
+#    needs:
+#      - docker
+#
+#    steps:
+#      - name: Download built image
+#        uses: actions/download-artifact@v4
+#        with:
+#          name: docker-image
+#      - name: Scan image with Trivy
+#        uses: aquasecurity/trivy-action@master
+#        with:
+#          input: /github/workspace/image.tar  # from download-artifact
+#          format: 'sarif'
+#          output: 'trivy-results-docker.sarif'
+#          ignore-unfixed: true
+#      - name: Upload results to GH Security tab
+#        uses: github/codeql-action/upload-sarif@v2
+#        with:
+#          sarif_file: 'trivy-results-docker.sarif'
 
   publish:
     needs: