celo-org/Trivy
Run a Trivy Scan and upload the results
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Nov 13, 2025
- License
- None
Pinned Snippet
uses: celo-org/trivy-composite-action@723ec407fb1bf8a9b573ff09e0210c95b02c0434 # v1.0.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| scan-type | Type of scan: image or filesystem. | yes | — |
| image-ref | Image to scan (required if scan-type is "image"). | — | — |
| scan-ref | Path to scan (required if scan-type is "fs"). | — | — |
| timeout | — | — | 15m |
| vuln-type | — | — | os,library |
| severity | — | — | UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL |
| tf-vars | — | — | — |
| pr-comment | — | — | true |
| skip-dirs | — | — | — |
| skip-setup-trivy | — | — | false |
Outputs
| name | description |
|---|---|
| text-report | text report of trivy scan |
| sarif-file | sarif report from trivy scan |