Added check for fixable vulnerabilities

aerospike · Oct 11, 2023 · 9541ddb · 9541ddb
1 parent 4833e75
commit 9541ddb
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 7 deletions.
diff --git a/.snyk b/.snyk
@@ -5,10 +5,6 @@
 # Helm-chart related ignore rules should be added directly in the Snyk UI
 
 ignore:
-  SNYK-RHEL8-OPENSSLLIBS-3315644:
-    - '*':
-        reason: fix not available
-        expires: 2023-04-18T11:38:28.614Z
   SNYK-CC-K8S-1:
     - 'config/samples/storage/aerospike_local_volume_provisioner.yaml > *':
         reason: Third-party (Local Static Provisioner) manifest file

diff --git a/Jenkinsfile b/Jenkinsfile
@@ -77,11 +77,11 @@ pipeline {
                                sh "set +x; ./snyk-linux auth \$(cat ${env.WORKSPACE}/../../aerospike-kubernetes-operator-resources/third-party-credentials/snyk); set -x"
 
                                // Scan the dependencies
-                               sh "./snyk-linux test  --severity-threshold=high"
+                               sh "./snyk-linux test  --severity-threshold=high --fail-on=all"
 
                                // Scan the operator images
-                               sh "./snyk-linux container test  ${OPERATOR_CONTAINER_IMAGE_CANDIDATE_NAME} --severity-threshold=high --file=Dockerfile --policy-path=.snyk"
-                               sh "./snyk-linux container test  ${OPERATOR_BUNDLE_IMAGE_CANDIDATE_NAME} --severity-threshold=high --file=Dockerfile --policy-path=.snyk"
+                               sh "./snyk-linux container test  ${OPERATOR_CONTAINER_IMAGE_CANDIDATE_NAME} --severity-threshold=high --file=Dockerfile --policy-path=.snyk --fail-on=all"
+                               sh "./snyk-linux container test  ${OPERATOR_BUNDLE_IMAGE_CANDIDATE_NAME} --severity-threshold=high --file=Dockerfile --policy-path=.snyk --fail-on=all"
                            }
                         }
                     }