Commit cc3de29 1 parent 5d245d6 commit cc3de29 Copy full SHA for cc3de29
File tree 1 file changed +5
-1
lines changed
1 file changed +5
-1
lines changed Original file line number Diff line number Diff line change 35
35
CVE_CRITICAL : ${{ env.CVE_CRITICAL }}
36
36
CVE_HIGH : ${{env.CVE_HIGH}}
37
37
CVE_MEDIUM : ${{env.CVE_MEDIUM}}
38
+ # CVE_CRITICAL: ${{ steps.cve_description.outputs.CVE_CRITICAL }}
39
+ # CVE_HIGH: ${{ steps.cve_description.outputs.CVE_HIGH }}
40
+ # CVE_MEDIUM: ${{ steps.cve_description.outputs.CVE_MEDIUM }}
38
41
steps :
39
42
- name : Checkout the code
40
43
uses : actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
52
55
with :
53
56
sarif_file : ' results.sarif'
54
57
- name : CVE Description escaped extraction and print
58
+ # id: cve_description
55
59
run : |
56
60
SCAN_RESULTS=$(jq -r 'try .runs[0].tool.driver.rules | map(.help.text) | join("\\n")' results.sarif)
57
61
echo "CVE_CRITICAL=$(echo $SCAN_RESULTS | grep -o CRITICAL | wc -l)" >> $GITHUB_ENV
67
71
SendSlackNotification :
68
72
needs : BuildAndScan
69
73
uses : ./.github/workflows/send-slack-notification.yml
70
- if : github.event_name == 'schedule' && steps.cve-threshold.outcome == 'failure'
74
+ if : github.event_name == 'schedule' && needs.BuildAndScan. steps.cve-threshold.outcome == 'failure'
71
75
with :
72
76
CVE_CRITICAL : ${{needs.BuildAndScan.outputs.CVE_CRITICAL}}
73
77
CVE_HIGH : ${{needs.BuildAndScan.outputs.CVE_HIGH}}
You can’t perform that action at this time.
0 commit comments