ci: override CVE scan blocking ADD directive on central ui build

hotosm · Nov 12, 2024 · ea4a033 · ea4a033
1 parent 35f688a
commit ea4a033
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/build_odk_imgs.yml b/.github/workflows/build_odk_imgs.yml
@@ -21,9 +21,7 @@ jobs:
         "ghcr.io/${{ github.repository }}/odkcentral:latest"
       extra_build_args: |
         ODK_CENTRAL_TAG=${{ vars.ODK_CENTRAL_TAG }}
-      # odkcentral backend npm install fails on ARM64
-      # uncomment once fixed
-      # multi_arch: true
+      multi_arch: true
 
   build-odkcentral-ui:
     uses: hotosm/gh-workflows/.github/workflows/[email protected]
@@ -35,3 +33,5 @@ jobs:
       extra_build_args: |
         ODK_CENTRAL_TAG=${{ vars.ODK_CENTRAL_TAG }}
       multi_arch: true
+      # Allow usage of ADD directive in this specific use case
+      skip_cve: "CKV_DOCKER_8,CKV_DOCKER_2,CKV_DOCKER_3,CKV_DOCKER_5,CKV_DOCKER_4"