actions-marketplace-validations/Trivy Action
Scan docker image vulnerability using Trivy and create GitHub Issue
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| trivy_version | Trivy version | no | latest |
| image | The target image name of vulnerability scan (specify this parameter or "IMAGE_NAME" environment variable | no | — |
| severity | severities of vulnerabilities (separated by commma) | no | HIGH,CRITICAL |
| vuln_type | target vlunerability [os,library] (separated by commma) | no | os,library |
| ignore_unfixed | Ignore unfixed vulnerabilities [true, false] | no | false |
| template | Trivy --template option | no | — |
| token | GitHub access token used to create a issue | yes | — |
| issue_title | Issue title | no | Security Alert |
| issue_label | Issue label (separated by commma) | no | trivy,vulnerability |
| issue_assignee | Issue assignee (separated by commma) | no | — |
| fail_on_vulnerabilities | Whether the action should fail if a vulnerability was found | no | false |
Outputs
| name | description |
|---|---|
| issue_number | The created issue number |
| html_url | The URL to view the issue |