diff --git a/.github/workflows/publish-docker-container.yml b/.github/workflows/publish-docker-container.yml index efecca63..f692ce03 100644 --- a/.github/workflows/publish-docker-container.yml +++ b/.github/workflows/publish-docker-container.yml @@ -33,6 +33,7 @@ jobs: context: . file: ./COMETwebapp/Dockerfile push: ${{ github.event_name != 'pull_request' }} + provenance: mode=max tags: ${{ steps.meta.outputs.tags }} secrets: | "DEVEXPRESS_NUGET_KEY=${{ secrets.DEVEXPRESS_NUGET_KEY }}" @@ -50,20 +51,14 @@ jobs: command: sbom image: stariongroup/comet-web-community-edition:latest output: sbom.json - - - name: Docker Scout Recommendations - uses: docker/scout-action@v1 - with: - command: recommendations - image: stariongroup/comet-web-community-edition:latest - + - name: Upload Docker Scout SARIF Report uses: github/codeql-action/upload-sarif@v2 with: sarif_file: scout.sarif - - name: Invoke deployment hook - uses: distributhor/workflow-webhook@v3 - env: - webhook_url: ${{ secrets.WEBHOOK_URL }} - webhook_secret: ${{ secrets.WEBHOOK_SECRET }} \ No newline at end of file +# - name: Invoke deployment hook +# uses: distributhor/workflow-webhook@v3 +# env: +# webhook_url: ${{ secrets.WEBHOOK_URL }} +# webhook_secret: ${{ secrets.WEBHOOK_SECRET }} \ No newline at end of file