basel5001/Container Security Scanner
Scan container images for vulnerabilities using Trivy + Grype and generate SBOM with Syft
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image | Container image to scan (e.g., nginx:latest) | yes | — |
| severity | Minimum severity to report (CRITICAL, HIGH, MEDIUM, LOW) | no | HIGH |
| fail-on-vuln | Fail the workflow if vulnerabilities found | no | true |
| generate-sbom | Generate SBOM with Syft | no | true |
| sbom-format | SBOM output format (spdx-json, cyclonedx-json) | no | spdx-json |
| upload-results | Upload scan results as artifacts | no | true |
Outputs
| name | description |
|---|---|
| trivy-vulns | Number of vulnerabilities found by Trivy |
| grype-vulns | Number of vulnerabilities found by Grype |
| sbom-file | Path to generated SBOM file |