Merge pull request #41 from IABTechLab/kcc-UID2-2329-add-dotnet-pipeline

UID2-2329 Pass in vulnerability_failure_severity

Author: cYKatherine

.github/workflows/build-and-publish.yaml

@@ -16,6 +16,10 @@ on:
       dotnet_version:
         type: string
         default: 5.0
+      vulnerability_failure_severity:
+        description: The severity to fail the workflow if such vulnerability is detected. DO NOT override it unless a Jira ticket is raised. Must be one of ['CRITICAL', 'CRITICAL,HIGH' or 'CRITICAL,HIGH,MEDIUM'] (without space in between).
+        type: string
+        default: 'CRITICAL,HIGH'
 
 jobs:
   build-and-pubish:
@@ -24,4 +28,6 @@ jobs:
     with:
       release_type: ${{ inputs.release_type }}
       dotnet_version: ${{ inputs.dotnet_version }}
+      publish_vulnerabilities: ${{ inputs.publish_vulnerabilities }}
+      vulnerability_failure_severity: ${{ inputs.vulnerability_failure_severity }}
     secrets: inherit