crazy-max/Container Scan
Check for vulnerabilities in your container image
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| trivy_version | Trivy CLI version (eg. v0.20.0) | no | latest |
| image | Container image to scan (eg. alpine:3.7) | no | — |
| tarball | Container image tarball path to scan | no | — |
| dockerfile | Dockerfile required to generate a sarif report | no | — |
| severity | Report vulnerabilities of provided level or higher (default: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL) | no | — |
| severity_threshold | Defines threshold for severity | no | — |
| ignore_unfixed | Ignore unfixed vulnerabilities | no | false |
| annotations | Create GitHub annotations in your workflow for vulnerabilities discovered | no | false |
| github_token | GitHub Token as provided by secrets | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| json | JSON format scan result |
| sarif | SARIF format scan result |