astounds/Trivy Image Scan
Scan Docker images for vulnerabilities using Trivy
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Trivy version to use | no | v0.70.0 |
| image | Docker image to scan | yes | — |
| db-repository | Custom DB repositories for Trivy | no | ghcr.io/aquasecurity/trivy-db:2,public.ecr.aws/aquasecurity/trivy-db |
| java-db-repository | Custom Java DB repositories for Trivy | no | ghcr.io/aquasecurity/trivy-java-db:1,public.ecr.aws/aquasecurity/trivy-java-db:1 |
| severity | Severity levels to scan for | no | CRITICAL,HIGH |
| exit-code | exit code when vulnerabilities were found | no | 1 |
| ignore-unfixed | ignore unfixed vulnerabilities | no | false |
| pkg-types | comma-separated list of vulnerability types (os,library) | no | os,library |
| format | Output format for Trivy results (e.g., table, json, etc.) | no | table |
Outputs
| name | description |
|---|---|
| scan-result | The result of the Trivy scan |