chore: don't scan images that are not pushed to the registry

philips-software · Nov 10, 2023 · 678fcc1 · 678fcc1
1 parent e3880f5
commit 678fcc1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
@@ -69,7 +69,7 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
       - uses: anchore/sbom-action@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
-        if: ${{ steps.build-and-push.outputs.digest != '' }}
+        if: ${{ steps.build-and-push.outputs.digest != '' && github.event_name != 'merge_group' }}
         with:
           image: ${{ env.REGISTRY }}/${{ github.repository }}@${{ steps.build-and-push.outputs.digest }}
           dependency-snapshot: true