actions-marketplace-validations/AWS ECR Scan Image
Scan a Docker image stored in AWS ECR and fail if vulnerabilities are found.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| repository | ECR repository, eg myorg/myimage. | yes | — |
| tag | Image tag to scan. | yes | — |
| fail_threshold | Fail if any vulnerabilities equal to or over this severity level are detected. Valid values: critical, high, medium, low, informational. | — | medium |
| ignore_list | List of CVE IDs to ignore in the vulnerability findings. | — | — |
Outputs
| name | description |
|---|---|
| critical | Number of critical vulnerabilities detected. |
| high | Number of high vulnerabilities detected. |
| medium | Number of medium vulnerabilities detected. |
| low | Number of low vulnerabilities detected. |
| informational | Number of informational vulnerabilities detected. |
| unknown | Number of unknown severity vulnerabilities detected. |
| total | Total number of vulnerabilities detected. |