neuvector/NeuVector Vulnerability Scan Action
Scans a container image for vulnerabilities with [NeuVector](https://neuvector.com)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image-registry | Registry of the image to scan, e.g. `https://registry.organization.com/` | no | "" |
| image-registry-username | Username for the registry authentication | no | "" |
| image-registry-password | Password for the registry authentication | no | "" |
| image-repository | Repository of the image to scan, e.g. `org/image-name` | yes | — |
| image-tag | Tag of the image to scan, e.g. `1.0.0` | yes | — |
| min-high-cves-to-fail | Minimum CVEs with high severity to fail the job | no | 0 |
| min-medium-cves-to-fail | Minimum CVEs with medium severity to fail the job | no | 0 |
| cve-names-to-fail | Comma-separated list of CVE names(without spaces between the entries) that make the job fail, e.g. `CVE-2021-4160,CVE-2022-0778 | no | "" |
| cve-names-to-exempt | Comma-separated list of CVE names(without spaces between the entries) that exempt the job fail, e.g. `CVE-2021-4160,CVE-2022-0778 | no | "" |
| nv-scanner-image | NeuVector Scanner image to use for scanning | no | neuvector/scanner:latest |
| output | Output format, one of: `text`, `json`, `csv` | no | text |
| debug | Debug mode, on of: `true`, `false` | no | false |
Outputs
| name | description |
|---|---|
| vulnerability_count | Number of found vulnerabilities |
| high_vulnerability_count | Number of found vulnerabilities with high severity |
| medium_vulnerability_count | Number of found vulnerabilities with medium severity |