docs: Add HIGH severity to Trivy command in GitLab CI example to match comment (#1013)

* Add HIGH severity to Trivy command in GitLab CI example to match comment

* Change comment to accurately reflect Trivy command that fails only on CRITICAL vulnerabilities
This commit is contained in:
skovati
2021-05-22 20:55:46 -05:00
committed by GitHub
parent 4446961167
commit 349371bbc9

View File

@@ -78,7 +78,7 @@ container_scanning:
--output "$CI_PROJECT_DIR/gl-container-scanning-report.json" "$FULL_IMAGE_NAME"
# Prints full report
- time trivy --exit-code 0 --cache-dir .trivycache/ --no-progress "$FULL_IMAGE_NAME"
# Fails on high and critical vulnerabilities
# Fail on critical vulnerabilities
- time trivy --exit-code 1 --cache-dir .trivycache/ --severity CRITICAL --no-progress "$FULL_IMAGE_NAME"
cache:
paths: