diff --git a/.github/workflows/kubernetes.yaml b/.github/workflows/kubernetes.yaml index 67560e5..52646ac 100644 --- a/.github/workflows/kubernetes.yaml +++ b/.github/workflows/kubernetes.yaml @@ -294,15 +294,15 @@ jobs: ${{ steps.login-ecr.outputs.registry }}/${{ github.event.deployment.payload.name }}:latest ${{ steps.login-ecr.outputs.registry }}/${{ github.event.deployment.payload.name }}:${{ needs.initialize.outputs.version }} ${{ steps.login-ecr.outputs.registry }}/${{ github.event.deployment.payload.name }}:${{ github.sha }} - - name: Scan for vulnerabilities - if: inputs.repository_kind == 'ecr' - uses: crazy-max/ghaction-container-scan@v3 - with: - image: ${{ steps.login-ecr.outputs.registry }}/${{ github.event.deployment.payload.name }}:latest - dockerfile: Containerfile - severity: ${{ env.IMAGE_SCAN_SEVERITY }} - severity_threshold: ${{ env.IMAGE_SCAN_SEVERITY_THRESHOLD }} - annotations: ${{ env.IMAGE_SCAN_ANNOTATIONS }} +# - name: Scan for vulnerabilities +# if: inputs.repository_kind == 'ecr' +# uses: crazy-max/ghaction-container-scan@v3 +# with: +# image: ${{ steps.login-ecr.outputs.registry }}/${{ github.event.deployment.payload.name }}:latest +# dockerfile: Containerfile +# severity: ${{ env.IMAGE_SCAN_SEVERITY }} +# severity_threshold: ${{ env.IMAGE_SCAN_SEVERITY_THRESHOLD }} +# annotations: ${{ env.IMAGE_SCAN_ANNOTATIONS }} - name: Push image to ECR if: inputs.repository_kind == 'ecr' run: | @@ -446,7 +446,7 @@ jobs: docker push -a ${{ steps.login-ecr.outputs.registry }}/${{ github.event.deployment.payload.name }}-${{ matrix.containerfile_targets }} commit: - needs: [initialize] + needs: [initialize, image-build-ecr-single] environment: ${{ github.event.deployment.payload.env }} runs-on: ${{ inputs.runner }} steps: