This repository was archived by the owner on Jun 29, 2021. It is now read-only.
File tree 2 files changed +6
-3
lines changed
2 files changed +6
-3
lines changed Original file line number Diff line number Diff line change 4
4
![ GitHub] ( https://img.shields.io/github/license/homoluctus/gitrivy?color=brightgreen )
5
5
6
6
This is a GitHub Actions to scan vulnerability using [ Trivy] ( https://github.com/aquasecurity/trivy ) .<br >
7
+ If vulnerabilities are found by Trivy, it creates the following GitHub Issue.
8
+
9
+ ![ image] ( https://github.com/homoluctus/gitrivy/issue.png )
7
10
8
11
## Usage
9
12
@@ -13,7 +16,7 @@ This is a GitHub Actions to scan vulnerability using [Trivy](https://github.com/
13
16
| :--:| :--:| :--:| :--|
14
17
| token| True| N/A| GitHub access token<br >${{ secrets.GITHUB_TOKEN }} is recommended|
15
18
| trivy_version| False| latest| Trivy version|
16
- | image| True| N/A| The target image name to scan the vulnerability|
19
+ | image| True| N/A| The target image name to scan the vulnerability< br >Specify this parameter or ` IMAGE_NAME ` environment variable |
17
20
| severity| False| HIGH,CRITICAL| Sevirities of vulunerabilities (separeted by commma)|
18
21
| vuln_type| False| os,library| Scan target are os and / or library (separeted by commma)|
19
22
| ignore_unfixed| False| false| Ignore unfixed vulnerabilities<br >Specify true or false|
Original file line number Diff line number Diff line change @@ -10,8 +10,8 @@ inputs:
10
10
default : ' latest'
11
11
required : false
12
12
image :
13
- description : ' The target image name of vulnerability scan'
14
- required : true
13
+ description : ' The target image name of vulnerability scan (specify this parameter or "IMAGE_NAME" environment variable '
14
+ required : false
15
15
severity :
16
16
description : ' sevirities of vulunerabilities (separeted by commma)'
17
17
default : ' HIGH,CRITICAL'
You can’t perform that action at this time.
0 commit comments