Update jenkins.md

Fixed typo docker-scout command
This commit is contained in:
rraszewski 2023-09-11 09:08:56 +02:00 committed by GitHub
parent 5900235a2e
commit 2f85bb7296
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -22,11 +22,11 @@ stage('Analyze image') {
sh 'echo $DOCKER_HUB_PAT | docker login -u $DOCKER_HUB_USER --password-stdin' sh 'echo $DOCKER_HUB_PAT | docker login -u $DOCKER_HUB_USER --password-stdin'
// Analyze and fail on critical or high vulnerabilities // Analyze and fail on critical or high vulnerabilities
sh 'docker-scout cves $IMAGE_TAG --exit-code --only-serverity critical,high' sh 'docker-scout cves $IMAGE_TAG --exit-code --only-severity critical,high'
} }
} }
``` ```
This installs Docker Scout, logs into Docker Hub, and then runs Docker Scout to This installs Docker Scout, logs into Docker Hub, and then runs Docker Scout to
generate a CVE report for an image and tag. It only shows critical or generate a CVE report for an image and tag. It only shows critical or
high-severity vulnerabilities. high-severity vulnerabilities.