diff --git a/.github/workflows/release-docker-image.yaml b/.github/workflows/release-docker-image.yaml index 49f34b6..70442e4 100644 --- a/.github/workflows/release-docker-image.yaml +++ b/.github/workflows/release-docker-image.yaml @@ -36,9 +36,12 @@ on: type: string default: main vulnerability_severity: - description: The severity to fail the workflow if such vulnerability is detected. DO NOT override it unless a Jira ticket is raised. Must be one of ['CRITICAL', 'HIGH' or 'MEDIUM']. - type: string - default: 'HIGH' + description: The severity to fail the workflow if such vulnerability is detected. DO NOT override it unless a Jira ticket is raised. + type: choice + options: + - CRITICAL,HIGH + - CRITICAL,HIGH,MEDIUM + - CRITICAL (DO NOT use if JIRA ticket not raised) jobs: Image: diff --git a/.github/workflows/validate-image.yaml b/.github/workflows/validate-image.yaml index f709fbf..1d90c5b 100644 --- a/.github/workflows/validate-image.yaml +++ b/.github/workflows/validate-image.yaml @@ -3,11 +3,14 @@ on: workflow_dispatch: inputs: failure_severity: - description: 'Must be one of CRITICAL, HIGH, MEDIUM' - required: false - default: HIGH + description: The severity to fail the workflow if such vulnerability is detected. DO NOT override it unless a Jira ticket is raised. + type: choice + options: + - CRITICAL,HIGH + - CRITICAL,HIGH,MEDIUM + - CRITICAL (DO NOT use if JIRA ticket not raised) fail_on_error: - description: 'If true, will fail the build if vulnerabilities are found' + description: If true, will fail the build if vulnerabilities are found required: true type: boolean default: true