From ea4a0330371c4cdf2f7caa408ef6b78d4b85410f Mon Sep 17 00:00:00 2001 From: spwoodcock Date: Tue, 12 Nov 2024 18:03:37 +0000 Subject: [PATCH] ci: override CVE scan blocking ADD directive on central ui build --- .github/workflows/build_odk_imgs.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build_odk_imgs.yml b/.github/workflows/build_odk_imgs.yml index cde53d8754..236a2e8e5e 100644 --- a/.github/workflows/build_odk_imgs.yml +++ b/.github/workflows/build_odk_imgs.yml @@ -21,9 +21,7 @@ jobs: "ghcr.io/${{ github.repository }}/odkcentral:latest" extra_build_args: | ODK_CENTRAL_TAG=${{ vars.ODK_CENTRAL_TAG }} - # odkcentral backend npm install fails on ARM64 - # uncomment once fixed - # multi_arch: true + multi_arch: true build-odkcentral-ui: uses: hotosm/gh-workflows/.github/workflows/image_build.yml@2.0.7 @@ -35,3 +33,5 @@ jobs: extra_build_args: | ODK_CENTRAL_TAG=${{ vars.ODK_CENTRAL_TAG }} multi_arch: true + # Allow usage of ADD directive in this specific use case + skip_cve: "CKV_DOCKER_8,CKV_DOCKER_2,CKV_DOCKER_3,CKV_DOCKER_5,CKV_DOCKER_4"