nickciolpan/Docker Scan Lite
Lightweight Dockerfile security scanner — detect outdated images, secrets, insecure commands, and more
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| dockerfile | Path to Dockerfile to scan | no | Dockerfile |
| severity | Minimum severity to report (info, low, medium, high) | no | "" |
| fail-on | Fail the action if issues at or above this severity are found (info, low, medium, high) | no | high |
| format | Output format: text, json, or sarif | no | text |
Outputs
| name | description |
|---|---|
| total-issues | Total number of issues found |
| high-issues | Number of high severity issues |
| medium-issues | Number of medium severity issues |
| low-issues | Number of low severity issues |
| sarif | SARIF output (when format is sarif) |