trivoallan/Regis Security Analysis
Analyze a container image with regis and optionally post results to a PR.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image-url | Container image URL to analyze. | yes | — |
| auth | Registry credentials as `registry=user:pass`. | no | "" |
| playbook | URL or path to a custom playbook YAML. | no | "" |
| report-url | URL to the hosted report (used as a link in the PR comment). | no | "" |
| github-token | Token for posting PR comments. Requires the pull-requests: write permission. | no | ${{ github.token }} |
| pr-url | PR URL to post the comment on (auto-detected in pull_request context). | no | "" |
| upload-artifact | Whether to upload the report as a workflow artifact. | no | true |
| artifact-name | Name for the uploaded artifact. | no | regis-security-report |
| version | regis Docker image version tag. | no | latest |
Outputs
| name | description |
|---|---|
| report-path | Absolute path to the report directory on the runner. |