changed the scan command to run on failures

Signed-off-by: fast-n-curious <[email protected]>
fast-n-curious · Sep 25, 2024 · 30c803d · 30c803d
1 parent 5cb6e94
commit 30c803d
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/nctl-scan-dockerfile.yaml b/.github/workflows/nctl-scan-dockerfile.yaml
@@ -26,6 +26,6 @@ jobs:
         run: nctl version
 
       - name: NCTL Scan - Dockerfile
-        run: nctl scan dockerfile --policies controls/dockerfile-best-practices --resources config-files/dockerfile/Dockerfile
+        run: nctl scan dockerfile --policies controls/dockerfile-best-practices --resources config-files/dockerfile/Dockerfile --audit-as-warn
 
       - run: echo "🍏 This job's status is ${{ job.status }}."
diff --git a/.github/workflows/nctl-scan-k8s.yaml b/.github/workflows/nctl-scan-k8s.yaml
@@ -26,9 +26,9 @@ jobs:
         run: nctl version
 
       - name: NCTL Scan - Kubernetes
-        run: nctl scan kubernetes --policies controls/pod-security --resources config-files/k8s 
+        run: nctl scan kubernetes --policies controls/pod-security --resources config-files/k8s --audit-as-warn
 
       - name: NCTL Scan - Kubernetes Detailed Report
-        run: nctl scan kubernetes --policies controls/pod-security --resources config-files/k8s --details 
+        run: nctl scan kubernetes --policies controls/pod-security --resources config-files/k8s --details --audit-as-warn
 
       - run: echo "🍏 This job's status is ${{ job.status }}."
diff --git a/.github/workflows/nctl-scan-terraform.yaml b/.github/workflows/nctl-scan-terraform.yaml
@@ -36,6 +36,6 @@ jobs:
         # terraform show -json tfplan.binary | jq > payload.json
         run: |
           ./scripts/install-tf.sh
-          nctl scan terraform --policies controls/terraform-best-practices --resources config-files/terraform/ecs/payload.json
+          nctl scan terraform --policies controls/terraform-best-practices --resources config-files/terraform/ecs/payload.json --audit-as-warn
 
       - run: echo "🍏 This job's status is ${{ job.status }}."