From 164a527ec51cab994f81f466e58646a1fc740b50 Mon Sep 17 00:00:00 2001 From: Peter Muriuki Date: Wed, 4 Dec 2024 23:06:53 +0300 Subject: [PATCH] Remove docker scouting for now --- .github/workflows/publish.yml | 28 ---------------------------- 1 file changed, 28 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index c323063..47bbb72 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -77,31 +77,3 @@ jobs: - name: Image digest run: echo ${{ steps.docker_build.outputs.digest }} - - - name: Scan Docker Image with Docker Scout and Save Report - id: scout - run: | - # Save the Docker Scout report as JSON and Markdown - docker scout cves ${{ steps.meta.outputs.tags }} --output json > scout-report.json - docker scout cves ${{ steps.meta.outputs.tags }} --output markdown > scout-report.md - - - name: Check Docker Scout Scan Result - id: check-scout-result - run: | - # Check if any vulnerabilities are reported in the JSON output - if grep -q '"severity":' scout-report.json; then - echo "Vulnerabilities found in Docker Scout report." - echo "found_vulnerabilities=true" >> $GITHUB_ENV - else - echo "No vulnerabilities found." - echo "found_vulnerabilities=false" >> $GITHUB_ENV - - - name: Create GitHub Issue for Vulnerabilities - if: env.found_vulnerabilities == 'true' - uses: peter-evans/create-issue-from-file@v4 - with: - title: "Docker Scout Vulnerability Report for Image ${{ steps.meta.outputs.tags }}" - content-filepath: scout-report.md - labels: | - "Security Support" - "Bug Report" \ No newline at end of file