actions-marketplace-validations/Deep Security Smart Check Scan Action

Scan container images with Deep Security Smart Check

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
namedescriptionrequireddefault
DSSC_IMAGE_NAMEContainer repository, eg myorg/myimage.yes
DSSC_SMARTCHECK_HOSTDeep Security Smart Check url, eg mydomain.com.yes
DSSC_SMARTCHECK_USERDeep Security Smart Check username, eg admin.yes
DSSC_SMARTCHECK_PASSWORD(MANDATORY) Deep Security Smart Check password, eg 12345.yes
DSSC_IMAGE_PULL_AUTH(MANDATORY) Container registry credentials in a json format, eg '{"username":"<user>","password":"<password>"}' or {"aws":{"region":"us-east-1","accessKeyID":"'AWS_ACCESS_KEY_ID'","secretAccessKey":"'AWS_SECRET_ACCESS_KEY'"}}'yes
DSSC_INSECURE_SKIP_TLS_VERIFY(OPTIONAL) If the client should ignore certificate errors when connecting to Deep Security Smart Check. You may want to set this if you've configured a self signed cert. eg truenotrue
DSSC_INSECURE_SKIP_REGISTRY_TLS_VERIFY(OPTIONAL) If Deep Security Smart Check should ignore certificate errors from the image registry. eg truenotrue
DSSC_PREREGISTRY_SCAN(OPTIONAL) Specify this option to trigger a "pre-registry scan", which pushes the image to a temporary registry on the scan system.no
DSSC_PREREGISTRY_HOST(OPTIONAL) The hostname of the temporary registry. Defaults to the smartcheck-host on port 5000.no
DSSC_PREREGISTRY_USER(OPTIONAL) The username to authenticate with the temporary registry.no
DSSC_PREREGISTRY_PASSWORD(OPTIONAL) The password to authenticate with the temporary registry.no
DSSC_RESULTS_FILE(OPTIONAL) The path to write the scan results to. If not provided, the scan results will be written to stdout.no
DSSC_FINDINGS_THRESHOLD(OPTIONAL) A JSON object that can be used to fail this step if an image contains findings that exceed the threshold.no

no outputs