reviewdog/Run trivy with reviewdog
🐶 Run trivy with reviewdog on pull requests to enforce security best practices
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GITHUB_TOKEN | yes | ${{ github.token }} |
| working_directory | Directory to run the action on, from the repo root. Default is . ( root of the repository) | no | . |
| level | Report level for reviewdog [info,warning,error] | no | error |
| tool_name | The name for the report as it will show up in GitHub's interface. Default is trivy. | no | trivy |
| reporter | Reporter of reviewdog command [github-pr-check,github-pr-review]. Default is github-pr-check. | no | github-pr-check |
| filter_mode | Filtering for the reviewdog command [added,diff_context,file,nofilter]. Default is added. | no | added |
| fail_level | If set to `none`, always use exit code 0 for reviewdog. Otherwise, exit code 1 for reviewdog if it finds at least 1 issue with severity greater than or equal to the given level. Possible values: [none,any,info,warning,error] Default is `none`. | no | none |
| fail_on_error | **Deprecated**. This option is no longer recommended for use and will be removed in future versions. Exit code for reviewdog when errors are found [true,false] Default is `false`. | no | false |
| flags | Additional reviewdog flags | no | "" |
| trivy_command | Trivy command [aws,config,filesystem,image,kubernetes,rootfs,sbom,vm] | yes | — |
| trivy_target | Trivy target to scan | yes | — |
| trivy_version | The version of trivy to install. Default is latest. | no | latest |
| trivy_flags | List of arguments to send to trivy For the output to be parsable by reviewdog --format=checkstyle is enforced Default is blank. | no | "" |
Outputs
| name | description |
|---|---|
| trivy-return-code | trivy command return code |
| reviewdog-return-code | reviewdog command return code |