phorus-group/Vulnerability Analysis Action
Action that scans for vulnerabilities using Trivy
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Mar 28, 2026
- License
- Apache 2.0
Pinned Snippet
uses: phorus-group/vulnerability-analysis-action@b7b16d693e7eb50fb9b97fd7cd6ba109ffd740ab # no releases — HEAD as of 2026-07-11tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| scan-type | Scan type to use for scanning vulnerability | no | fs |
| input | Reference of tar file to scan | no | "" |
| scan-ref | Scan reference | no | . |
| severity | Severities of vulnerabilities to be displayed | no | UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL |
| skip-dirs | Comma separated list of directories where traversal is skipped | no | "" |
| scanners | Comma-separated list of what security issues to detect (vuln,secret,misconfig,license) | no | vuln,secret |
| ignores | Comma-separated list of relative paths in the repository to one or more .trivyignore files | no | "" |
| trivy-config | Path to trivy.yaml config | no | — |
| tf-vars | Path to terraform tfvars file | no | — |
| upload-sarif | Upload the sarif file to the GitHub Security tab. Disable if you don't have GitHub Advanced Security | no | true |
Outputs
no outputs