sandbox-coprs/Trivy Scan
Scan vulns with Trivy
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| output | writes results to a file with the specified file name (without extension) | no | vulnerabilites |
| artifact | Name of the artifact to upload | yes | vulnerabilites |
| upload-sarif | To upload the sarif report in GitHub | no | "" |
| format | output format (table, json, template) | no | sarif,json,template |
| template | use an existing template for rendering output (@/contrib/sarif.tpl, @/contrib/gitlab.tpl, @/contrib/junit.tpl | no | @/contrib/html.tpl |
| image-ref | image reference (for backward compatibility) | yes | — |
| scan-type | Scan type to use for scanning vulnerability | no | image |
| input | reference of tar file to scan | no | "" |
| scan-ref | Scan reference | no | . |
| exit-code | exit code when vulnerabilities were found | no | 0 |
| ignore-unfixed | ignore unfixed vulnerabilities | no | false |
| vuln-type | comma-separated list of vulnerability types (os,library) | no | os,library |
| severity | severities of vulnerabilities to be displayed | no | UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL |
| skip-dirs | comma separated list of directories where traversal is skipped | no | "" |
| skip-files | comma separated list of files to be skipped | no | "" |
| cache-dir | specify where the cache is stored | no | "" |
| timeout | timeout (default 5m0s) | no | "" |
| ignore-policy | filter vulnerabilities with OPA rego language | no | "" |
| hide-progress | hide progress output | no | true |
| list-all-pkgs | output all packages regardless of vulnerability | no | false |
| security-checks | comma-separated list of what security issues to detect | no | "" |
| trivyignores | comma-separated list of relative paths in repository to one or more .trivyignore files | no | "" |
Outputs
no outputs