another scan test

Signed-off-by: Neil South <[email protected]>

.dockleignore

@@ -1,7 +1,22 @@
+# Copyright 2023 MONAI Consortium
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
 
 # set root to default user because we want to run nginx
-CIS-DI-0001
+#CIS-DI-0001
+
 # Do not store secrets in Dockerfiles
 CIS-DI-0010
+
 # Use latest tag because to check the image inside only
 DKL-DI-0006

.github/workflows/ci.yml

@@ -443,7 +443,6 @@ jobs:
           ignore-unfixed: true
           vuln-type: 'os,library'
           severity: 'CRITICAL'
-          fail-build: true
 
       - name: Run dockle scan
         id: dockle-scan

doc/dependency_decisions.yml

@@ -585,7 +585,7 @@
       - 8.0.0
       - 8.0.1
       - 8.0.2
-
+      - 8.0.3
     :when: 2022-10-14T23:37:16.793Z
     :who: mocsharp
     :why: MIT (https://github.com/dotnet/runtime/raw/main/LICENSE.TXT)