dtcenter/Docker Security Scan
Install Syft/Grype and scan Docker images for vulnerabilities
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| images | JSON array of Docker images to scan (e.g., ["image1:tag", "image2:tag"]) | yes | — |
| fail-on-critical | Whether to fail the action if any Critical CVEs are found | no | false |
| fail-on-high | Whether to fail the action if any High CVEs are found | no | false |
| upload-logs | Whether to upload scan logs as artifacts | no | true |
| log-artifact-name | Name for the uploaded log artifact | no | security-scan-logs |
Outputs
| name | description |
|---|---|
| scan-status | Status of the security scan: 0=success, 1=CVE threshold exceeded, 2=scan failure |