ksoclabs/KSOC Image Scan
KSOC scans for CVEs in your images as part of your GitHub Actions CI workflow.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Aug 13, 2024
- License
- Apache 2.0
Pinned Snippet
uses: ksoclabs/image-scan-action@e8f6694be7fddbd5c6f8b6af97d46b5128b97f34 # v0.0.5tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| fail_on_severity | The severity level at which to fail the workflow. Valid values are: negligible, low, medium, high, critical. | no | — |
| format | The format of the output. Valid values are: table, sarif. | no | table |
| ignore_cves | List of CVEs to ignore. | no | — |
| image | Image to scan. | no | — |
Outputs
| name | description |
|---|---|
| sarif | Path to a SARIF report file for the image |