@@ -123,18 +123,18 @@ jobs:
123123 # run: |
124124 # docker buildx imagetools inspect ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
125125
126- - name : Docker Scout
127- id : docker-scout
128- if : ${{ github.event_name == 'pull_request' }}
129- uses : docker/scout-action@v1
130- with :
131- command : compare
132- image : ${{ steps.meta.outputs.tags }}
133- to : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.COMPARE_TAG }}
134- write-comment : true
135- ignore-unchanged : true
136- only-severities : critical,high
137- github-token : ${{ secrets.GITHUB_TOKEN }}
126+ # - name: Docker Scout
127+ # id: docker-scout
128+ # if: ${{ github.event_name == 'pull_request' }}
129+ # uses: docker/scout-action@v1
130+ # with:
131+ # command: compare
132+ # image: ${{ steps.meta.outputs.tags }}
133+ # to: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.COMPARE_TAG }}
134+ # write-comment: true
135+ # ignore-unchanged: true
136+ # only-severities: critical,high
137+ # github-token: ${{ secrets.GITHUB_TOKEN }}
138138
139139 - name : Build final
140140 id : build-final
@@ -154,7 +154,7 @@ jobs:
154154
155155 - name : Analyze for critical and high CVEs
156156 id : docker-scout-cves
157- if : ${{ github.event_name == 'pull_request' }}
157+ # if: ${{ github.event_name == 'pull_request' }}
158158 uses : docker/scout-action@v1
159159 with :
160160 command : cves
@@ -164,7 +164,7 @@ jobs:
164164
165165 - name : Upload SARIF result
166166 id : upload-sarif
167- if : ${{ github.event_name = = 'pull_request' }}
167+ # if: ${{ github.event_name ! = 'pull_request' }}
168168 uses : github/codeql-action/upload-sarif@v2
169169 with :
170170 sarif_file : sarif.output.json
0 commit comments