fix: allow disable trivy scans

SocialGouv · Jul 26, 2024 · 62cd7d4 · 62cd7d4
1 parent 335fd40
commit 62cd7d4
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/.github/workflows/use-ks-gh-production.yaml b/.github/workflows/use-ks-gh-production.yaml
@@ -14,6 +14,9 @@ on:
       kubeconfigContext:
         required: false
         type: string
+      disableTrivyScans:
+        required: false
+        type: boolean
 
 jobs:
   deploy:
@@ -52,14 +55,17 @@ jobs:
           pat: ${{ secrets.SOCIALGROOVYBOT_BOTO_PAT }}
           token: ${{ secrets.GITHUB_TOKEN }}
           deployment-id: ${{ steps.deployment-starting.outputs.deployment-id }}
-          deployment-name: ${{ steps.deployment-starting.outputs.deployment-name }}
-          deployment-ok: ${{ steps.deployment.outcome == 'success' && 'true' || 'false' }}
+          deployment-name:
+            ${{ steps.deployment-starting.outputs.deployment-name }}
+          deployment-ok:
+            ${{ steps.deployment.outcome == 'success' && 'true' || 'false' }}
           provider: ${{ steps.deployment.outputs.provider }}
 
   trivy:
     name: 🕵️ Trivy vulnerability scanner
     needs: [deploy]
     runs-on: ubuntu-latest
+    if: ${{ ! inputs.disableTrivyScans }}
     strategy:
       fail-fast: false
       max-parallel: 3