pribal/Build Secure Docker Image

Build a Docker image and scan it with Dockle for security best practices

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Oct 6, 2025
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: pribal/build-secure-docker-image@0deabf2da39b588622eeb6032d8a0b74b5f3d6ce # v1.0.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
tagDocker image name and tag in "name:tag" formatyes
pathDirectory where the Docker build command should run (default ".")no.
dockerfilePath to the Dockerfile relative to the "path" input (default "Dockerfile")noDockerfile
docker-build-commandCustom command to build the Docker image (default: "docker build -f <dockerfile> -t <tag> <path>"")no
dockle-versionDockle version to use (default: latest release)no
dockle-exit-codeExit code returned by Dockle when WARN or FATAL issues are found (default: 1)no1
dockle-exit-levelDockle exit level threshold (INFO, WARN, or FATAL). (default: WARN)noWARN

no outputs