ci(trivy): #106 temporary only fail CI for CRITICAL vulnerabilities

Author: abhisheksr01

.github/workflows/pipeline.yml

@@ -117,7 +117,7 @@ jobs:
         with:
           dockerfile: Dockerfile
           failure-threshold: error
-      - name: Run Trivy vulnerability for Dockerfile
+      - name: Run Trivy vulnerability for IAC
         uses: aquasecurity/trivy-action@0.29.0
         with:
           scan-type: config

config/trivy/trivy.yaml

@@ -5,8 +5,8 @@ misconfiguration:
     - kubernetes
 
 severity:
-  - UNKNOWN
-  - LOW
-  - MEDIUM
-  - HIGH
+#  - UNKNOWN # Tracking the issue here: https://github.com/abhisheksr01/spring-boot-microservice-best-practices/issues/351
+#  - LOW
+#  - MEDIUM
+#  - HIGH
   - CRITICAL