uptycslabs/Uptycs Image Scanner
Scans containers for vulnerabilities, secrets, malware, and potentially dangerous image configurations.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| credentials | Tenant-specific credentials for authenticating to uptycs | yes | — |
| image | The name or ID of the docker image(s) to scan (comma-separated for multiple) | yes | — |
| fatal-cvss-score | The CVSS score at which a detected vulnerability should fail the build | no | -1 |
| fatal-vulnerability-severity | Maximum allowable severity for a detected vulnerability. | no | unset |
| ignore-no-exploit | Ignore any vulnerabilities for which no known exploits are available. | no | — |
| ignore-no-fix | Only report vulnerabilities for which fixes are available. | no | — |
| output-format | The format type to use when writing reports to disk. Valid values are 'json' and 'csv'. | no | — |
| output-name | A unique ID that can be used to organize output files from multiple scans. Defaults to the id of the scanned image. | no | — |
| policy-name | The name of the image assurance policy to apply to images scanned in this workflow. | no | — |
| scanner-image | The uptycs-ci image to use when executing the scan. | no | uptycs/uptycs-ci:3.7.4 |
| uptycs-ca-cert | The path to a custom CA Cert to use for connecting to uptycs. | no | "" |
| verbose | Include verbose output. | no | — |
| version | The version of uptycs-cli to use when scanning. | no | 3.7.4 |
| install_dir | The directory to copy the uptycs-cli binary | no | /usr/local/bin/ |
| exit-on-error | Fail build on error. | no | — |
Outputs
no outputs