feat: add "end" job to workflows expected to fail #8

	name: Test External Rock

	on:
	push:
	workflow_dispatch:

	env:
	VULNERABILITY_REPORT_SUFFIX: '.vulnerability-report.json'
	SKOPEO_IMAGE: 'quay.io/skopeo/stable:v1.15.1'
	TEST_IMAGE: 'bkimminich/juice-shop'
	TEST_IMAGE_FILENAME: 'juice-shop'

	jobs:
	setup:
	runs-on: ubuntu-22.04
	steps:
	- run: \|
	docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
	-v $PWD:/workdir -w /workdir \
	${{ env.SKOPEO_IMAGE }} \
	copy docker://${{ env.TEST_IMAGE }} \
	oci-archive:test_image

	- uses: actions/upload-artifact@v4
	if: ${{ !cancelled() }}
	with:
	name: test_image
	path: test_image
	retention-days: 1

	test:
	uses: canonical/oci-factory/.github/workflows/Test-Rock.yaml@main
	needs: [setup]
	with:
	oci-archive-name: test_image
	test-black-box: false # will always fail since bkimminich/juice-shop is not a rock.
Check failure on line 36 in .github/workflows/test_external_rock.yaml View workflow run for this annotation GitHub Actions / Test External Rock Invalid workflow file `The workflow is not valid. .github/workflows/test_external_rock.yaml (Line: 36, Col: 23): Invalid input, test-black-box is not defined in the referenced workflow. .github/workflows/test_external_rock.yaml (Line: 38, Col: 21): Invalid input, test-malware is not defined in the referenced workflow.`
	test-efficiency: true
	test-malware: true
	test-oci-compliance: true
	test-vulnerabilities: true

	end:
	# we expect vulnerabilities scan to fail, so we add a final job so PR checks pass.
	if: ${{ !cancelled() }}
	needs: [test]
	runs-on: ubuntu-22.04
	steps:
	- run: \|
	echo Workflow complete!

Provide feedback