actions-marketplace-validations/Sysdig CIS Dockerfile Benchmark
Run CIS Dockerfile benchmark against dockerfiles in repository (CIS 4.1, 4.2, 4.3, 4.6, 4.7, 4.9, 4.10)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Mar 16, 2020
- License
- Apache 2.0
Pinned Snippet
uses: actions-marketplace-validations/sysdiglabs_benchmark-dockerfile@0d2e85f332790bab8df9b64b9d14cb7a71f1ca20 # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| directory | Directory of dockerfiles | no | ./ |
| dockerfilePattern | Dockerfile name pattern (case insensitive) | no | dockerfile |
| disallowedPackages | list of disallowed packages separated by comma | no | "" |
| trustedBaseImages | list of trusted base images separated by comma | no | "" |
| secretPatterns | list of secret patterns separated by comma | no | "" |
Outputs
| name | description |
|---|---|
| violation_report | CIS Dockerfile benchmark violation report |