diff --git a/Dockerfile b/Dockerfile index 296868e..f3e52ca 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM quay.io/kubescape/kubescape:v2.3.0 +FROM quay.io/kubescape/kubescape:v2.3.6 # Kubescape uses root privileges for writing the results to a file USER root diff --git a/action.yml b/action.yml index 828bb95..c49bd04 100644 --- a/action.yml +++ b/action.yml @@ -78,7 +78,7 @@ inputs: If enabled, Kubescape will make fixes to the input files. You can then use these fixes to open Pull Requests from your CI/CD pipeline. required: false - default: false + default: "false" runs: using: docker image: Dockerfile diff --git a/entrypoint.sh b/entrypoint.sh index f70872c..51a5c6a 100755 --- a/entrypoint.sh +++ b/entrypoint.sh @@ -96,12 +96,8 @@ severity_threshold_opt=$( echo "" ) -# The `kubescape fix` subcommand requires the latest "json" format version. -# Other formats ignore this flag. -format_version_opt="--format-version v2" - # TODO: include artifacts_opt once https://github.com/kubescape/kubescape/issues/1040 is resolved -scan_command="kubescape scan ${frameworks_cmd} ${controls_cmd} ${files} ${account_opt} ${fail_threshold_opt} ${severity_threshold_opt} --format ${output_formats} ${format_version_opt} --output ${output_file} ${verbose} ${exceptions} ${controls-config}" +scan_command="kubescape scan ${frameworks_cmd} ${controls_cmd} ${files} ${account_opt} ${fail_threshold_opt} ${severity_threshold_opt} --format ${output_formats} --output ${output_file} ${verbose} ${exceptions} ${controls-config}" echo "${scan_command}" eval "${scan_command}"