actions-marketplace-validations/dockle-action
Lint & Best Practices for container images with integrations to Github UI
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image | The image that should be analysed | yes | — |
| report-format | Choose one of json or sarif for UI integration with GHAS | no | json |
| report-name | Defaults to dockle-report and extension is added automatically. | no | dockle-report |
| failure-threshold | Level of findings that should trigger a job failure. Defaults to WARN. Options are INFO, WARN, FATAL | no | WARN |
| exit-code | Should the job fail if findings at or higher than threshold? 0=No 1=Yes. Defaults to 1 | no | 1 |
| dockle-version | If you wish to specify a version of Dockle to use in the format 1.2.3 - otherwise uses latest | no | latest |
| accept-keywords | Comma seperated list of acceptable keywords for credential checks. | no | "" |
| accept-filenames | Comma seperated list of acceptable file names for credential checks | no | "" |
| accept-extensions | Comma seperated list of acceptable file extensions for credential checks | no | "" |
| timeout | docker timeout. e.g) 5s, 5m... | no | 10m |
| dockle-host | Override the DOCKLE_HOST environment variable | no | unix:///var/run/docker.sock |
| token | GitHub token used to query the GitHub API | no | ${{ github.token }} |
Outputs
no outputs