vonsteer/AWS ECR Security Report
Retrieve scan results for a Docker image stored in AWS ECR and fail if vulnerabilities are found.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| repository | ECR repository, eg myorg/myimage. | yes | — |
| tag | Image tag to scan. | yes | — |
| fail_threshold | Fail if any vulnerabilities equal to or above this severity level are detected. Valid values: critical, high, medium, low, informational undefined, none. | — | critical |
| region | AWS region where the ECR repository is located. | — | us-east-2 |
| ignore_list | List of CVE IDs to ignore in the vulnerability findings. | — | "" |
| pr_comment | Whether to post a comment on the PR with the scan results. | — | true |
| max_retries | Maximum number of retries for the scan command (AWS can be slow). | — | 40 |
| retry_delay | Delay in seconds between retries for the scan command. | — | 5 |
Outputs
| name | description |
|---|---|
| critical | Number of critical vulnerabilities detected. |
| high | Number of high vulnerabilities detected. |
| medium | Number of medium vulnerabilities detected. |
| low | Number of low vulnerabilities detected. |
| informational | Number of informational vulnerabilities detected. |
| undefined | Number of undefined severity vulnerabilities detected. |
| total | Total number of vulnerabilities detected. |
| detailed_findings | Detailed findings of the scan. |