Split CVE scan job
Scan releases and prereleases on dedicated jobs for better notifications
@@ -6,7 +6,7 @@ on:
- cron: '0 8 * * *'
jobs:
- trivy:
+ scan-prerelease:
runs-on: ubuntu-latest
steps:
- name: Get prerelease tag
@@ -19,6 +19,9 @@ jobs:
uses: docker://docker.io/aquasec/trivy:latest
with:
args: --cache-dir /var/lib/trivy --no-progress --exit-code 1 --severity MEDIUM,HIGH,CRITICAL ${{ steps.prerelease.outputs.image }}
+ scan-release:
+ runs-on: ubuntu-latest
+ steps:
- name: Get release tag
id: release
run: |
