kartverket/pharos-action

GitHub action for running different Security Scans, that should be run before deploying to SKIP

Trust Signals

workflow.ymlSHA-pinned

uses: kartverket/pharos@e5a5cf71dd41384d6d62c7d9b387851c0457e81b # v0.6.4

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
image_url	An image_url of the form registry/repository:tag or registry/repository@digest	no	—
trivy	A boolean which determines whether or not Trivy vulnerability scan will be run. Defaults to true	no	true
tfsec	A boolean which determines whether or not TFSec security scan will be run. Defaults to true	no	true
allow_severity_level	A string which determines the highest level of severity the security scans can find while still succeeding workflows. Only `medium`, `high` and `critical` are allowed as input strings. Note that these values are case sensitive.	no	medium
disable_severity_check	Skip checking severity of scan results. Useful when running the action ad-hoc to update the Github security status.	no	false
trivy_category	A category for describing the Trivy action. Useful for differentiating between different runs of different images.	no	Trivy
scan_platform_modules	If you need to use terraform platform modules (github.com/kartverket/terraform-modules)	no	false
skip_dirs	Comma seperated list of directories where traversal is skipped	no	""
skip_files	Comma seperated list of files where traversal is skipped	no	catalog-info.yaml

no outputs