eonx-com/Container Scan GitHub Action
GitHub action for performing CVE vulnerability scans and raising alerts in OpsGenie.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| container_id | The container ID in the docker-compose.yml file that will be built | yes | — |
| container_image | The image output by docker-compose as a result of the build action, this is the image that will be scanned | yes | — |
| docker_compose_yaml_path | Full path/filename (relative to the repository root) of the docker-compose.yaml file containing the container definition | yes | — |
| ignore_yaml_path | Full path/filename (relative to the repository root) of the file containing vulnerabilities to ignore | yes | — |
| opsgenie_api_key | Optional OpsGenie API key used to raise alerts when vulnerabilities are found | no | — |
| opsgenie_alert_prefix | Optional prefix to prepend to the OpsGenie alert message | no | — |
| opsgenie_alert_teams | Optional comma separated list of teams to be alerted to OpsGenie message | no | — |
| opsgenie_alert_level | Optional alert level for OpsGenie alert (defaults to P3) | no | P3 |
| opsgenie_entity | Optional entity name to be alerted to OpsGenie message, defaults to "GitHub Actions" | no | GitHub Actions |
| alert_defcon1 | Boolean flag, if true will generate alerts on all CVE vulnerabilities of DEFCON1 level | no | true |
| alert_critical | Boolean flag, if true will generate alerts on all CVE vulnerabilities of CRITICAL level | no | true |
| alert_high | Boolean flag, if true will generate alerts on all CVE vulnerabilities of HIGH level | no | true |
| alert_medium | Boolean flag, if true will generate alerts on all CVE vulnerabilities of MEDIUM level | no | false |
| alert_low | Boolean flag, if true will generate alerts on all CVE vulnerabilities of LOW level | no | false |
| alert_negligible | Boolean flag, if true will generate alerts on all CVE vulnerabilities of NEGLIGIBLE level | no | false |
| alert_unknown | Boolean flag, if true will generate alerts on all CVE vulnerabilities of UNKNOWN level | no | true |
| docker_login_registry | Docker registry to login to | no | — |
| docker_login_registry_username | Docker registry username | no | — |
| docker_login_registry_password | Docker registry password | no | — |
| composer_private_token | GitHub Token for Composer private packages | no | — |
Outputs
no outputs