anantacloud-actions/Custom Trivy Scanner
Scan images or filesystems for vulnerabilities with caching support
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scan-type | Type of scan (image, fs, config, rootfs) | yes | fs |
| scan-target | The target to scan (e.g. "." or "nginx:latest") | yes | . |
| severity | Severities to include (UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL) | — | HIGH,CRITICAL |
| exit-code | Exit code when vulnerabilities are found (0 to pass, 1 to fail) | — | 0 |
| ignore-unfixed | Ignore vulnerabilities without a fixed version | — | false |
| trivy-version | Specific Trivy version to use | — | 0.48.3 |
| generate-sbom | Generate a CycloneDX SBOM instead of a vulnerability scan | — | false |
| format | Output format (table, json, sarif) | — | table |
Outputs
no outputs