Update jenkins.md

Fixed typo docker-scout command
This commit is contained in:
rraszewski 2023-09-11 09:08:56 +02:00 committed by GitHub
parent 5900235a2e
commit 2f85bb7296
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -22,11 +22,11 @@ stage('Analyze image') {
sh 'echo $DOCKER_HUB_PAT | docker login -u $DOCKER_HUB_USER --password-stdin'
// Analyze and fail on critical or high vulnerabilities
sh 'docker-scout cves $IMAGE_TAG --exit-code --only-serverity critical,high'
sh 'docker-scout cves $IMAGE_TAG --exit-code --only-severity critical,high'
}
}
```
This installs Docker Scout, logs into Docker Hub, and then runs Docker Scout to
generate a CVE report for an image and tag. It only shows critical or
high-severity vulnerabilities.
high-severity vulnerabilities.