olatt/vanagon_snyk_scan_action
Scans vanagon builds for ruby dependencies and untrusted repos
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| snykToken | snyk access token | yes | — |
| snykOrg | snyk org to write results to | yes | — |
| branch | branch name to prepend to the snyk project name | no | — |
| noMonitor | allows skipping the snyk monitor step | no | — |
| skipProjects | A comma separated list of projects to skip | no | — |
| skipPlatforms | A comma separated list of platforms to skip | no | — |
| urlsToReplace | URLs to replace in a key value format <domain>,<format>. Example: foo.example.com,%s/foo,bar.example.com,%/a/bar | no | — |
| newHost | domain to replace urlsToReplace with. Usually a reverse proxy | no | — |
| rproxyKey | a basic auth password to use for a reverse proxy | no | — |
| rproxyUser | a basic auth username to use for a reverse proxy | no | — |
| sshKey | a base64 encoded SSH key to install on the container | no | — |
| sshKeyName | Name of the SSH key. Written to /root/.ssh/<sshKeyName> | no | — |
| svDebug | turn on debug logging | no | — |
Outputs
| name | description |
|---|---|
| vulns | Array of vulnerable packages |