Skip to content
search

GitHub Action

Vulnerability scan

v2.3.0 Latest version

Vulnerability scan

search

Vulnerability scan

Perform vulnerability scan and report using trivy

Installation

Copy and paste the following snippet into your .yml file.

              

- name: Vulnerability scan

uses: wetransform/[email protected]

Learn more about this action in wetransform/gha-trivy

Choose a version

gha-trivy

Composite action for Trivy vulnerability scanning:

  • add specific (default: CRITICAL) vulnerabilities to a JUnit test report
  • create a HTML report on vulnerabilities and add it as artifact to the run
  • add information to the run summary on types of vulnerabilities