Merge pull request #646 from GitGuardian/pbes/IAC-105/update-github-a…

…ction-iac-command feat(iac): github action should now use the new CI command
GitGuardian · Aug 16, 2023 · 8cc3a5a · 8cc3a5a
2 parents c9573e1 + 66df3af
commit 8cc3a5a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/changelog.d/20230725_144801_paul.beslin.ext_update_github_action_iac_command.md b/changelog.d/20230725_144801_paul.beslin.ext_update_github_action_iac_command.md
@@ -0,0 +1,3 @@
+### Changed
+
+- The IaC Github Action now executes the new `ggshield iac scan ci` command. This means the action will fail only if the changes introduce a new vulnerability. To fail if any vulnerability is detected, use the `ggshield iac scan ci --all` command
diff --git a/docker/actions-iac-entrypoint.sh b/docker/actions-iac-entrypoint.sh
@@ -12,4 +12,4 @@ git config --global --add safe.directory "$PWD"
 
 
 args=("$@")
-ggshield iac scan all -v ${args[@]}
+ggshield iac scan ci ${args[@]}