neevalt/Trivy scan

Scan repository and / or image to detect CVEs. Allows updating Github's security tab and send alert on slack channels.

Trust Signals

name	description	required	default
CONTAINER_REGISTRY_USER	Docker registry user. Required if using image scan.	no	—
CONTAINER_REGISTRY_TOKEN	Docker registry token. Required if using image scan.	no	—
SLACK_APP_TOKEN	Token used to send messages on slack. Required if 'channels' is set.	no	—
ref	Branch or tag the scan is associated to. Only used when scanning scan-type is 'fs'. Defaults to $GITHUB_REF, so is mandatory in cases where this value is not set, for instance if this action is triggered by a scheduler.	no	${{ github.ref }}
scan-type	Type of analysis: 'image' for docker images, 'fs' for files. Defaults to 'fs'.	no	fs
scan-target	Folder or docker image to scan. Defaults to respository folder.	no	.
slack-channels	Comma separated slack channels to notify scan results.	no	—

name	description
trivy-json	JSON formatted scan result