netlify/security-netlify-trivy-parse
python wrapped trivy report parser adding features like suppression handling
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Jun 1, 2022
- License
- MIT
Pinned Snippet
uses: netlify/security-netlify-trivy@5c9cd8ac7c8f6bce74f1d5703afa8f05cb590508 # v0.7tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| trivy_report_file_path | location of trivy report that will be parsed | yes | trivy_report.json |
| suppression_file_path | path/name of suppression list file | no | suppressions-trivy |
| create_github_issue | boolean if user wishes to create github issues | no | false |
| github_min_severity | issues will be created for all discovered vulnerabilities with >= this severity | no | low |
| create_slack_notification | boolean if user wishes to create slack alert | no | false |
| slack_min_severity | alerts will be sent to slack for all discovered vulnerabilities with >= severity | no | low |
| container_scan_slack_webhook | slack webhook, if desired | no | "" |
| container_scan_gh_access_token | GH access token used to create issues | no | "" |
| github_repo_name | github repo name | no | "" |
Outputs
no outputs