Skip to content

Commit

Permalink
Add vulnerability_failure_severity for maven repos (#96)
Browse files Browse the repository at this point in the history
  • Loading branch information
cYKatherine authored Apr 15, 2024
1 parent d977901 commit f5c3872
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion .github/workflows/shared-publish-to-maven-versioned.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,10 @@ on:
description: The path to the directory for which the version should be determined.
type: string
default: '.'
vulnerability_failure_severity:
description: The severity to fail the workflow if such vulnerability is detected. DO NOT override it unless a Jira ticket is raised. Must be one of ['CRITICAL', 'CRITICAL,HIGH' or 'CRITICAL,HIGH,MEDIUM'] (without space in between).
type: string
default: 'CRITICAL,HIGH'

env:
IS_RELEASE: ${{ (inputs.release_type == 'Major' || inputs.release_type == 'Minor' || inputs.release_type == 'Patch') && (github.event.repository.default_branch == github.ref_name ) }}
Expand Down Expand Up @@ -70,7 +74,7 @@ jobs:
uses: IABTechLab/uid2-shared-actions/actions/vulnerability_scan_filesystem@v2
with:
scan_severity: HIGH,CRITICAL
failure_severity: CRITICAL
failure_severity: ${{ inputs.vulnerability_failure_severity }}
publish_vulnerabilities: ${{ inputs.publish_vulnerabilities }}

- name: Set version number
Expand Down

0 comments on commit f5c3872

Please sign in to comment.