lacework/lw-scanner

Scan container images for vulnerabilities with Lacework's Inline Scanner

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Maintainedlast commit Feb 28, 2025
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: lacework/lw-scanner-action@b46cfd9875886f1e28860980aa05b468f87bc1fd # v1.4.5

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
LW_ACCOUNT_NAME	Your Lacework account name. For example, if your login URL is mycompany.lacework.net, the account name is mycompany.	yes	—
LW_ACCESS_TOKEN	Authorization token. Copy and paste the token from the inline scanner integration created in the Lacework console.	yes	—
IMAGE_NAME	Name of the container image you want to scan, for example, `node`.	yes	—
IMAGE_TAG	Tag of the container image you want to scan, for example, `12.18.2-alpine`.	yes	—
SCAN_LIBRARY_PACKAGES	Also scan software packages. (Default: true)	no	true
SAVE_RESULTS_IN_LACEWORK	Save results to Lacework. (Default: false)	no	false
SAVE_BUILD_REPORT	Saves the evaluation report as a local HTML file. (Default: false)	no	false
BUILD_REPORT_FILE_NAME	Specify custom file name for the HTML evalutation report, by default the name is OS_TYPE-IMAGE_DIGEST_SHA256.html.	no	—
DEBUGGING	Enable debug logging for scanner	no	false
PRETTY_OUTPUT	Renders table borders and adds color to Severity column in the output of the evaluation results. (Default: true)	no	true
SIMPLE_OUTPUT	Displays evaluation results without Introduced in `Layer` and `File Path` columns. (Default: true)	no	true
COLOR_OUTPUT	Colors are rendered in evaluation results when the `PRETTY_OUTPUT` option is enabled. (Default: true)	no	true
ADDITIONAL_PARAMETERS	Additional parameters/flags. Only global and `image evalute` flags are supported.	no	—
RESULTS_IN_GITHUB_SUMMARY	Display results in github summary. (Default: true)	no	true

Outputs

no outputs