schubergphilis/MCVS-docker-action
Mission Critical Vulnerability Scanner (MCVS) Docker action.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| build-args | Docker build arguments. Passed as-is if multiline, else formatted as `APPLICATION=value`. | — | — |
| context | Directory path that contains all the files needed to build a Docker image. | — | . |
| dockle-accept-key | One of the Dockle checks is the inspection of use of secrets in environment variables. Currently, there is a reported bug `goodwithtech/dockle/issues/250`, i.e. if a specific version of a package will be installed then an error will be thrown by Dockle, which is incorrect. To mitigate this one has to specify the packages that are applicable, e.g.: `libcrypto3,libssl3`. | — | — |
| grype-version | The grype version to be used by the anchore/scan-action. | — | — |
| images | The name of the to be created image. | — | ghcr.io/${{ github.repository }} |
| dockerhub-username | Docker Hub username. Required when push-to-container-registry is set to 'dockerhub'. | — | — |
| dockerhub-token | Docker Hub access token. Required when push-to-container-registry is set to 'dockerhub'. | — | — |
| push-to-container-registry | Specify the container registry to which the image must be pushed. Set the value to: 'ghcr' for GitHub Container Registry, 'dockerhub' for Docker Hub, or '' to disable pushing to a container registry. | — | ghcr |
| token | A token is required to allow the mcvs-docker-action to push the image that it has been built, to the packages repository of the GitHub repository where the action has been run. | — | — |
Outputs
no outputs