Add PR scan only

NovatecConsulting · Nov 10, 2023 · b4bc6c1 · b4bc6c1
1 parent b744080
commit b4bc6c1
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/buildAndPushContainer.yml b/.github/workflows/buildAndPushContainer.yml
@@ -8,6 +8,8 @@ on:
   push:
     branches:
       - main
+  pull_request:
+    branches: [ "**" ]
 
 jobs:
   build:
@@ -44,10 +46,13 @@ jobs:
 
       - name: Docker Scout
         id: docker-scout
+        if: ${{ github.event_name == 'pull_request' }}
         uses: docker/scout-action@v1
         with:
           command: quickview,cves,recommendations,sbom
           to-latest: true
           ignore-base: true
           ignore-unchanged: true
-          only-fixed: true
+          only-severities: critical,high
+          write-comment: true
+          github-token: ${{ secrets.GH_TOKEN }}