atilsensalduz/quay-vulnerability-check
GitHub Action for reporting Docker image vulnerabilities on Quay registry
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| organization | The organization name on Quay.io where the repository is located. | yes | — |
| repository | The name of the repository on Quay.io to check for vulnerabilities. | yes | — |
| image_tag | The tag of the Docker image in the specified repository to check for vulnerabilities. | yes | — |
| quay_token | The Quay.io authentication token with necessary permissions to access the repository and perform vulnerability checks. | yes | — |
| severities | Comma-separated list of allowed severities. Example: 'High,Critical'. If not provided, all severities will be considered. Allowed values: Unknown, Low, Medium, High, Critical. | no | — |
| exit_code | The exit code to be set if vulnerabilities are found. Allowed values: 0 (default) or 1. | no | 0 |
Outputs
no outputs