joewitt commented on PR #9612: URL: https://github.com/apache/nifi/pull/9612#issuecomment-2578336917
If you compare the fail-build false claim with the output of the scan it seems like it thinks you wanted to fail on medium. My sense is if you dont define a limit it selects default by default but wont fail as configured. Consider instead we should fail and medium is a reasonable starting point. anchore/scan-action@v6 Looks like we'd set fail-build true and severity medium. What do you think? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
