Fix docker host bug (#329)

* Update entrypoint.sh

should be a value not boolean

* Update action.yaml

add example

* Update README.md
pull/317/head^2
Lukas Gravley 1 month ago committed by GitHub
parent 840deb4908
commit 207cd40078
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

@ -590,6 +590,7 @@ Following inputs can be used as `step.with` keys:
| `trivy-config` | String | | Path to trivy.yaml config |
| `github-pat` | String | | Authentication token to enable sending SBOM scan results to GitHub Dependency Graph. Can be either a GitHub Personal Access Token (PAT) or GITHUB_TOKEN |
| `limit-severities-for-sarif` | Boolean | false | By default *SARIF* format enforces output of all vulnerabilities regardless of configured severities. To override this behavior set this parameter to **true** |
| `docker-host` | String | | By default it is set to `unix://var/run/docker.sock`, but can be updated to help with containerized infrastructure values |
### Environment variables
You can use [Trivy environment variables][trivy-env] to set the necessary options (including flags that are not supported by [Inputs](#inputs), such as `--secret-config`).

@ -95,7 +95,7 @@ inputs:
description: 'limit severities for SARIF format'
required: false
docker-host:
description: 'unix domain socket path to use for docker scanning'
description: 'unix domain socket path to use for docker scanning, ex. unix:///var/run/docker.sock'
required: false
runs:
@ -126,4 +126,4 @@ runs:
- '-v ${{ inputs.trivy-config }}'
- '-x ${{ inputs.tf-vars }}'
- '-z ${{ inputs.limit-severities-for-sarif }}'
- '-y ${{ inputs.docker-host }}'
- '-y ${{ inputs.docker-host }}'

@ -168,7 +168,7 @@ if [ "$hideProgress" == "true" ];then
ARGS="$ARGS --quiet"
SARIF_ARGS="$SARIF_ARGS --quiet"
fi
if [ "$dockerHost" == "true" ];then
if [ $dockerHost ];then
ARGS="$ARGS --docker-host $dockerHost"
fi

Loading…
Cancel
Save