Skip to content

Commit 0c63078

Browse files
committed
readds risk guards
1 parent 85c3cf9 commit 0c63078

1 file changed

Lines changed: 8 additions & 8 deletions

File tree

.github/workflows/devguard-scanner.yaml

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -62,8 +62,8 @@ jobs:
6262
with:
6363
asset-name: l3montree-cybersecurity/projects/devguard/assets/devguard
6464
api-url: https://api.main.devguard.org
65-
fail-on-risk: never
66-
fail-on-cvss: never
65+
fail-on-risk: high
66+
fail-on-cvss: high
6767
web-ui: https://main.devguard.org
6868
continue-on-open-code-risk: true
6969
secrets:
@@ -84,8 +84,8 @@ jobs:
8484
asset-name: l3montree-cybersecurity/projects/devguard/assets/devguard
8585
api-url: https://api.main.devguard.org
8686
web-ui: https://main.devguard.org
87-
fail-on-cvss: never
88-
fail-on-risk: never
87+
fail-on-cvss: high
88+
fail-on-risk: high
8989
nix-cache-substituter: https://nix.garage.l3montree.cloud
9090
nix-cache-public-key: nix.garage.l3montree.cloud:MGlzfPQKA91/zxw91CN+GP7NpjAAwmKvWXlDYgeeI8k=
9191
nix-cache-s3-bucket: nix
@@ -109,8 +109,8 @@ jobs:
109109
asset-name: l3montree-cybersecurity/projects/devguard/assets/devguard
110110
api-url: https://api.main.devguard.org
111111
web-ui: https://main.devguard.org
112-
fail-on-cvss: never
113-
fail-on-risk: never
112+
fail-on-cvss: high
113+
fail-on-risk: high
114114
nix-cache-substituter: https://nix.garage.l3montree.cloud
115115
nix-cache-public-key: nix.garage.l3montree.cloud:MGlzfPQKA91/zxw91CN+GP7NpjAAwmKvWXlDYgeeI8k=
116116
nix-cache-s3-bucket: nix
@@ -133,8 +133,8 @@ jobs:
133133
asset-name: l3montree-cybersecurity/projects/devguard/assets/devguard-postgresql
134134
api-url: https://api.main.devguard.org
135135
web-ui: https://main.devguard.org
136-
fail-on-cvss: never
137-
fail-on-risk: never
136+
fail-on-cvss: high
137+
fail-on-risk: high
138138
nix-cache-substituter: https://nix.garage.l3montree.cloud
139139
nix-cache-public-key: nix.garage.l3montree.cloud:MGlzfPQKA91/zxw91CN+GP7NpjAAwmKvWXlDYgeeI8k=
140140
nix-cache-s3-bucket: nix

0 commit comments

Comments
 (0)