quay/Clair V4
Scans container images for vulnerabilities
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image-ref | A remote reference for the image to be scanned | no | "" |
| image-path | A path to the image .tar file (generated from the docker save command) to be scanned | no | "" |
| format | In which format to produce the results | no | sarif |
| output | Where to put the results | no | "" |
| return-code | What code to return if vulnerabilities are found | no | 0 |
| db-file-url | URL of the Sqlite3 zstd-compressed vulnerability database | no | "" |
| docker-config-dir | Path to the docker config dir for the image registry where image-ref is stored | no | "" |
| mode | Whether you want a report or to update the vulnerability database, choose report or update | no | report |
| db-file | Vulnerability database file created for mode `update` or DB file used for `report` mode | no | "" |
| clair-config | Path to a Clair v4 YAML config file (relative to GITHUB_WORKSPACE) for `update` mode | no | "" |
Outputs
no outputs