equisoft-actions/Run SAST on Docker images and upload a SARIF report to Github.
Utilizes Trivy to generate a SARIF report. The report is archived and uploaded to Github.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| aws-access-key-id | DEPRECATED. An AWS access key ID that has read permissions to the registry. | no | "" |
| aws-secret-access-key | DEPRECATED. An AWS secret access key that has read permissions to the registry. | no | "" |
| aws-region | AWS region for the registry. | no | "" |
| image-name | The Docker image to run the checks on. | yes | — |
| report-name | Override the default report name. This is useful for workflows that output multiple reports. | no | docker-sast |
| report-retention-days | Duration in days to preserve reports. | yes | 5 |
| role-to-assume | Role to assume that has read access to the registry. | no | — |
| role-session-name | Session name to use when assuming the role. | no | — |
| working-directory | Relative path under $GITHUB_WORKSPACE where the root project is located. | no | . |
Outputs
no outputs