-
-
Notifications
You must be signed in to change notification settings - Fork 16
/
action.yml
47 lines (44 loc) · 1.29 KB
/
action.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
# https://help.github.com/en/articles/metadata-syntax-for-github-actions
name: 'Container Scan'
description: 'Check for vulnerabilities in your container image'
author: 'crazy-max'
branding:
icon: 'shield'
color: 'green'
inputs:
trivy_version:
description: 'Trivy CLI version (eg. v0.20.0)'
default: 'latest'
required: false
image:
description: 'Container image to scan (eg. alpine:3.7)'
required: false
tarball:
description: 'Container image tarball path to scan'
required: false
dockerfile:
description: 'Dockerfile required to generate a sarif report'
required: false
severity:
description: 'Report vulnerabilities of provided level or higher (default: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL)'
required: false
severity_threshold:
description: 'Defines threshold for severity'
required: false
annotations:
description: 'Create GitHub annotations in your workflow for vulnerabilities discovered'
default: 'false'
required: false
github_token:
description: 'GitHub Token as provided by secrets'
default: ${{ github.token }}
required: false
outputs:
json:
description: 'JSON format scan result'
sarif:
description: 'SARIF format scan result'
runs:
using: 'node20'
main: 'dist/index.js'
post: 'dist/index.js'