Decided to remove the stupid double scan

This commit is contained in:
2025-01-07 19:55:06 +01:00
parent 42626d9faf
commit a14f3a212e

View File

@@ -23,7 +23,7 @@ if [ -z "$INPUT_IMAGE_NAME" ]; then
exit 1
fi;
GRYPE_OPTIONS=("-v" "--by-cve")
GRYPE_OPTIONS=("-v" "--by-cve" "--show-suppressed")
if [ -n "$INPUT_CONFIG_PATH" ] && [ -f "$INPUT_CONFIG_PATH" ]; then
GRYPE_OPTIONS+=("--config" "$INPUT_CONFIG_PATH")
@@ -40,10 +40,6 @@ else
GRYPE_OPTIONS+=("file:${INPUT_IMAGE_NAME}")
fi
# shellcheck disable=SC2145
echo "Running grype container scanning with options: ${GRYPE_OPTIONS[@]} --show-suppressed"
grype "${GRYPE_OPTIONS[@]}" "--show-suppressed"
if [ -n "$INPUT_FAIL_ON" ]; then
GRYPE_OPTIONS+=("--fail-on" "$INPUT_FAIL_ON")
fi