bashofmann/NeuVector Image Scan
Scans a container image for vulnerabilities with [NeuVector](https://neuvector.com)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Aug 15, 2022
- License
- Apache 2.0
Pinned Snippet
uses: bashofmann/neuvector-image-scan-action@5437a397f4042df12123c2a4a01d8d8005a561b8 # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| image-registry | Registry of the image to scan, e.g. `https://registry.organization.com/` | no | "" |
| image-registry-username | Username for the registry authentication | no | "" |
| image-registry-password | Password for the registry authentication | no | "" |
| image-repository | Repository of the image to scan, e.g. `org/image-name` | yes | — |
| image-tag | Tag of the image to scan, e.g. `1.0.0` | yes | — |
| min-high-cves-to-fail | Minimum CVEs with high severity to fail the job | no | 0 |
| min-medium-cves-to-fail | Minimum CVEs with medium severity to fail the job | no | 0 |
| cve-names-to-fail | Comma-separated list of CVE names that make the job fail, e.g. `CVE-2021-4160,CVE-2022-0778 | no | "" |
| nv-scanner-image | NeuVector Scanner image to use for scanning | no | neuvector/scanner:latest |
| output | Output format, one of: `text`, `json`, `csv` | no | text |
| debug | Debug mode, on of: `true`, `false` | no | false |
Outputs
| name | description |
|---|---|
| vulnerability_count | Number of found vulnerabilities |
| high_vulnerability_count | Number of found vulnerabilities with high severity |
| medium_vulnerability_count | Number of found vulnerabilities with medium severity |