{{- define "template.enforce-policy" -}}
- name: enforce-policy
  inputs:
    parameters:
      - name: fail-on-cvss
  container:
    image: "{{ .Values.pipeline.toolsImage.repository }}:{{ .Values.pipeline.toolsImage.tag }}"
    imagePullPolicy: {{ .Values.pipeline.toolsImage.pullPolicy }}
    command:
      - node
      - /app/dist/enforce-policy.js
    env:
      - name: FAIL_ON_CVSS
        value: {{ `{{inputs.parameters.fail-on-cvss}}` | quote }}
    volumeMounts:
      - name: workspace
        mountPath: /workspace
{{- end }}