adevinta/Vulnerability scanning with vulcan local
Scan for vulnerabilities
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Jun 14, 2023
- License
- MIT
Pinned Snippet
uses: adevinta/vulcan-local-action@49e1b45a89b528ae5d574f913eecbe1b8a38277a # v0.0.4tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| local-config | Path of the vulcan.yaml file | no | vulcan.yaml |
| use-local-config | Whether to use local-config file if exists | no | true |
| log-level | Log level | no | info |
| report-severity | Minimum severity to report | no | LOW |
| break-severity | Minimum severity to break the pipeline | no | NEVER |
| target-images | Space separated list of images to scan | no | — |
| target-paths | Space separated list of local paths or git repositories scan | no | — |
| include | Regex with the checks to include | no | — |
| exclude | Regex with the checks to exclude | no | — |
| policies | Space separated list of policies to apply | no | — |
| checktypes | Space separated list of urls or paths to checktypes | no | — |
| configs | Space separated list of config files | no | — |
| vars | Space separated list of variables | no | — |
| extra-args | Extra args to append to vulcan-local | no | — |
| version | Vulcan local version to use | — | v0.2.9 |
Outputs
| name | description |
|---|---|
| report | Path to the report file |
| status | Exit code depending on the vulns detected |