opensecdevops/OSDO Container Security Scan
Comprehensive container security scanning including image vulnerabilities, Dockerfile linting, and SBOM generation
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 21, 2026
- License
- None
Pinned Snippet
uses: opensecdevops/osdo-container-scan@53cc9925638e77ba89702036e0716a9913d7b280 # v2.0.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| image-name | Container image name to scan | yes | — |
| image-tag | Container image tag | no | latest |
| dockerfile-path | Path to Dockerfile for linting | no | ./Dockerfile |
| scanners | Scanners to use (trivy, grype, all) | no | trivy |
| enable-dockerfile-lint | Enable Dockerfile linting with Hadolint | no | true |
| enable-sbom | Generate SBOM for container | no | false |
| severity-threshold | Minimum severity to report (LOW, MEDIUM, HIGH, CRITICAL) | no | MEDIUM |
| fail-on-critical | Fail if critical vulnerabilities found | no | true |
| results-dir | Directory to store results | no | .osdo/results |
Outputs
| name | description |
|---|---|
| vulnerabilities-found | Total vulnerabilities found |
| critical-count | Critical vulnerabilities count |
| high-count | High vulnerabilities count |
| dockerfile-issues | Dockerfile linting issues found |
| sbom-path | Path to generated SBOM |