jarfernandez/Check Image
Validate container images against security and operational standards
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image | Container image to validate (e.g., nginx:latest, ghcr.io/org/app:1.0) | yes | — |
| config | Path to config file for the all command (relative to repo root) | no | "" |
| checks | Comma-separated list of checks to run (mutually exclusive with skip) | no | "" |
| skip | Comma-separated list of checks to skip (mutually exclusive with checks) | no | "" |
| fail-fast | Stop on first check failure | no | false |
| max-age | Maximum image age in days | no | "" |
| max-size | Maximum image size in MB | no | "" |
| max-layers | Maximum number of layers | no | "" |
| allowed-ports | Comma-separated list of allowed ports or @file path (relative to repo root) | no | "" |
| registry-policy | Path to registry policy file (relative to repo root) | no | "" |
| labels-policy | Path to labels policy file (relative to repo root) | no | "" |
| secrets-policy | Path to secrets policy file (relative to repo root) | no | "" |
| skip-env-vars | Skip environment variable checks in secrets detection | no | false |
| skip-files | Skip file system checks in secrets detection | no | false |
| allowed-platforms | Comma-separated list of allowed platforms or @file path (relative to repo root) | no | "" |
| allow-shell-form | Allow shell form for entrypoint or cmd without failing | no | false |
| log-level | Log level (trace, debug, info, warn, error, fatal, panic) | no | info |
| version | Version of check-image to use | no | 1.0.0 |
Outputs
| name | description |
|---|---|
| result | Validation result: passed, failed, or error |
| json | Full JSON output from check-image |