anantacloud-oss/trivy action

GitHub action to scan docker images for vulnerability issues using trivy.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Oct 5, 2025
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: anantacloud-oss/trivy-action@63a0b12c59942b9cf9cc884b50aca6e233a423ab # v0.0.9

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
image_nameThis input contains the docker images to scanyes
scan_typeThis input contains the scan type e.g. image, repository etc...noimage
formatThis input contains the scan output format e.g. table or jsonnotable
severityThis input contains the comma separated list of severities e.g. UNKNOWN,LOW,MEDIUM,HIGH,CRITICALno
exit_codeThis input contains the exit code in case vulnerabilies foundno128
vuln_typeThis input contains the vulnerability types to scan fornoos,library

no outputs