andreazorzetto/Aqua Security Scanner (Trivy Premium)
Scans container images for vulnerabilities with Aqua Security Scanner (Trivy Premium)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Nov 26, 2025
- License
- Apache 2.0
Pinned Snippet
uses: andreazorzetto/trivy-premium-action@458dbc97c0e08bbc6cd076a99543da7f863ff277 # v1.0.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| aqua-registry-username | Username for registry.aquasec.com to pull scanner image | yes | — |
| aqua-registry-password | Password for registry.aquasec.com to pull scanner image | yes | — |
| aqua-server | Aqua SaaS platform URL (e.g., https://eu-1.console.cloud.aquasec.com) | no | https://console.cloud.aquasec.com |
| aqua-token | Scanner token for Aqua SaaS authentication | yes | — |
| scanner-version | Aqua scanner image version | no | saas-latest |
| image-registry-integration | Registry name as configured in Aqua integrations (e.g., "Docker Hub") | no | "" |
| register-compliant | Register image only if compliant with Aqua policies | no | false |
| scan-local | Scan a locally built image (not yet in registry) | no | true |
| scan-ref | Target image to scan (image name) | no | . |
| format | Output format (table, json, sarif, html) | no | table |
| output | Output file path for scan results | no | "" |
| upload-sarif | Automatically upload SARIF results to GitHub Security tab (only applies when format is sarif) | no | true |
Outputs
no outputs