changeset 7116:86dae713d4c6

Try to make anchore failure fail build but upload results The actions page shows all runs as successful despite anchore opening three security errors. I am trying to get the build for anchore to fail but still upload its SARIF report and to cat the SARIF report.
author John Rouillard <rouilj@ieee.org>
date Wed, 28 Dec 2022 19:08:43 -0500
parents ddc007819528
children 9f3ca362a415
files .github/workflows/anchore.yml
diffstat 1 files changed, 3 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/.github/workflows/anchore.yml	Sat Dec 24 00:46:10 2022 -0500
+++ b/.github/workflows/anchore.yml	Wed Dec 28 19:08:43 2022 -0500
@@ -44,10 +44,12 @@
       id: scan
       with:
         image: "localbuild/testimage:latest"
-        fail-build: false
+        fail-build: true
     - name: Upload Anchore Scan Report
+      if: always()
       uses: github/codeql-action/upload-sarif@v2
       with:
         sarif_file: ${{ steps.scan.outputs.sarif }}
     - name: Inspect action SARIF report
+      if: always()
       run: cat ${{ steps.scan.outputs.sarif }}

Roundup Issue Tracker: http://roundup-tracker.org/