-
Notifications
You must be signed in to change notification settings - Fork 5.9k
fix(ci): disable trivy-scan-image #3461
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Codecov Report
@@ Coverage Diff @@
## main #3461 +/- ##
=======================================
Coverage 59.21% 59.21%
=======================================
Files 35 35
Lines 1709 1709
Branches 379 379
=======================================
Hits 1012 1012
Misses 559 559
Partials 138 138 Continue to review full report at Codecov.
|
@@ -80,6 +80,7 @@ | |||
"doctoc/**/trim": "^1.0.0", | |||
"postcss": "^8.2.1", | |||
"parcel-bundler/cssnano": "^5.0.2", | |||
"browserslist": "^4.16.5", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think it's best to keep unrelated changes in separate PRs, otherwise the commit message is misleading
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I generally agree. But CI was failing for this PR. For fixing vulnerability updates, should we merge even if CI is failing and then submit a follow-up PR?
This PR temporarily disables
trivy-scan-image
due to an upstream issue. See: github/codeql-action#528There was a vulnerability found when CI ran. This is fixed as well:
browserslist
Checklist
CHANGELOG.md
Fixes #3459