ghga-de/GHGA CI action tasks
Tasks that are executed in our CI pipeline for GHGA microservices
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 21, 2026
- License
- Apache 2.0
Pinned Snippet
uses: ghga-de/gh-action-ci@253e302d5e0a9b998259de701d49bfe78ad4c549 # v2.0.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| checkout | Checkout the repository | no | true |
| dockerhub_username | The DockerHub username | yes | ghga |
| dockerhub_token | The DockerHub token used to authenticate | yes | — |
| tag | The tag used to publish to the registry. | yes | — |
| dockerhub_namespace | The namespace used to publish to the registry. | yes | ghga |
| dockerhub_repository | The Docker Hub repository to publish to. Defaults to git repository name. | no | ${{ github.event.repository.name }} |
| working_directory | Directory which contains Dockerfile and project configuration files. | — | . |
| trivy_severity | Severities of vulnerabilities to scanned for and displayed. | — | CRITICAL,HIGH |
| trivy_enabled | Enable trivy scanning. | — | true |
| dockerhub_platforms | Platforms passed to DockerHub build and push action. | — | linux/amd64,linux/arm64 |
| flavor | Flavor to build. Expects 'Dockerfile.{flavor} to be present and appends '-{flavor}' to the tag. | — | "" |
Outputs
no outputs