stribog-cloud/KubeVigil Scan
Scan Kubernetes manifests for security misconfigurations with KubeVigil (KSPM).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| files | Path to a manifest file or directory to scan (passed to `kubevigil scan -f`). | yes | — |
| version | KubeVigil release to install. Either a release tag (e.g. "v1.0.0") or "latest" to resolve the newest GitHub release at runtime. | no | latest |
| format | Report format written to `output-file` (text, json, yaml, markdown, html, sarif, junit, csv). | no | sarif |
| output-file | Path to write the scan report to. | no | kubevigil-results.sarif |
| fail-on | Minimum severity (info, low, medium, high, critical) that fails this step. Left empty (default), the step never fails the build on findings -- it only fails on real scan/configuration errors. Set this to gate the build on findings and the value is passed through as `kubevigil scan --fail-on <value>`. | no | "" |
| config | Path to a .kubevigil.yaml configuration file (passed as --config). | no | "" |
| flags | Extra raw CLI flags appended verbatim to the `kubevigil scan` command. | no | "" |
Outputs
| name | description |
|---|---|
| exit-code | Exit code returned by the kubevigil scan command. |
| output-file | Path to the generated report file (same as the output-file input). |