periphery-security/Trivy PR Comment

Creates comment on Github PR from Trivy scan results

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Nov 3, 2025
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: periphery-security/action-privy@0d796ad35ba254f839fd4781d277c06018c52410 # action-privy@1.1.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
tokenGitHub tokenyes
trivy-resultsFilename containing Trivy scan results, in JSON formatyes
templateOptional handlebars template to format the comment.no
dry-runPerform a dry run, doesnt actually create issues or labelsnofalse

no outputs