tivix/Docker build
Builds, scans, and pushes a docker image
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| docker-path | Path to build in | no | ./ |
| docker-tag | Docker tag of the built image | yes | — |
| docker-dockerfile | Dockerfile to use | no | — |
| docker-target | Dockerfile target stage | no | — |
| docker-build-args | Comma seperated build args to pass | no | — |
| docker-cache-from | Where should docker look for caches | no | — |
| docker-cache-to | Where should docker write caches | no | type=inline |
| docker-extra-args | Extra arguments to pass to docker build | no | — |
| docker-attempt-pull | Will attempt to pull the tag before building | no | false |
| trivy-scan | Whether we scan the image | no | false |
| trivy-version | Which trivy version to use | no | latest |
| trivy-format | Trivys output format | no | table |
| trivy-exit-code | Trivys exit code upon scan failure | no | 2 |
| trivy-ignore-unfixed | Should we ignore unfixed CVEs | no | false |
| trivy-vuln-type | Which vulnerabilities to scan | no | os,library |
| trivy-severity | What severity CVEs should fail the scan. Can be UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL or a mix of those. | no | MEDIUM,HIGH,CRITICAL |
| trivy-github-token | Github token to use | no | — |
| docker-push | Push the built image | no | true |
Outputs
no outputs