broadinstitute/Docker image parse and scan
Parse Dockerfile and build, scan the image if a "blessed" base image is not used
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| context | Path to Docker build context (omit if using the 'image' option) | no | . |
| dockerfile | Path to Dockerfile within the build context (omit if using the 'image' option) | no | Dockerfile |
| image | Pre-built Docker image URL to scan (omit if using the 'dockerfile' option) | no | "" |
| type | Comma-delimited list of scan types | no | os |
| severities | Comma-delimited list of severities for Trivy | no | CRITICAL |
| sarif | Sarif template output path relative to repository root, if any (example: trivy-results.sarif) | no | "" |
| scanners | Does not scan image for secrets, but only vulnerabilities | no | vuln |
Outputs
no outputs