Trivy Docker Scanning Development Tutorials, Guides & Insights

If a critical vulnerability is detected, you might want to automate a rollback or stop deployment. You can add conditional checks in the pipeline to handle this:

stage('Conditional Deployment') {
    steps {
        script {
            // Example: if vulnerability scan fails, skip deployment
            def scanResult = sh(script: 'check-vulnerability.sh', returnStatus: true)
            if (scanResult != 0) {
                error('Vulnerability scan failed. Aborting deployment.')
            } else {
                // Proceed with deployment
                sh 'kubectl apply -f deployment.yaml'
            }
        }
    }
}