From 214599a5fd1157940fa37c66df26b655eb3e82ac Mon Sep 17 00:00:00 2001 From: Arunavo Ray Date: Sun, 15 Jun 2025 15:03:54 +0530 Subject: [PATCH] Dont fail workflow on security issues --- .claude/commands/new_release.md | 3 +++ .github/workflows/docker-build.yml | 5 +++-- 2 files changed, 6 insertions(+), 2 deletions(-) create mode 100644 .claude/commands/new_release.md diff --git a/.claude/commands/new_release.md b/.claude/commands/new_release.md new file mode 100644 index 0000000..5c0b102 --- /dev/null +++ b/.claude/commands/new_release.md @@ -0,0 +1,3 @@ +Evaluate all the updates being made. +Make sure the user has clarified if its a major, minor or a patch release. +Update the package.json first before you push the tag. \ No newline at end of file diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index ef4b05f..11cab24 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -120,7 +120,7 @@ jobs: image: ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest sarif-file: scout-results.sarif summary: true - exit-code: true + exit-code: false only-severities: critical,high write-comment: true github-token: ${{ secrets.GITHUB_TOKEN }} @@ -134,7 +134,7 @@ jobs: image: local://gitea-mirror:scan sarif-file: scout-results.sarif summary: true - exit-code: true + exit-code: false only-severities: critical,high write-comment: true github-token: ${{ secrets.GITHUB_TOKEN }} @@ -156,6 +156,7 @@ jobs: - name: Upload Docker Scout scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3 if: always() + continue-on-error: true with: sarif_file: scout-results.sarif