adfinis/Container Scanning Action
Action for scanning containers with trivy. Supports cosign (attestations and signing.)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 22, 2026
- License
- LGPL
Pinned Snippet
uses: adfinis/container-scanning-action@3b2ed30535dfc19639b38a4712df6fb5b739baa4 # v0.4.4tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| image-ref | Image to scan | yes | — |
| attest | Create an attestation using cosign | no | false |
| digest | The images digest | no | — |
| registry | The container registry | no | ghcr.io |
| token | Github Token | yes | — |
Outputs
no outputs