andrew_zah
/
trivy-action
mirror of https://github.com/aquasecurity/trivy-action
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
145 Commits
16 Branches
59 Tags
1.5 MiB
use-pinned-version
master
update-to-v0.45.0
update-trivy-v0.43.1
bump-trivy-3
bump-trivy
add-support-for-trivy-config
fix-golden-files
exit-code-test
update-tarball-docs
volume-mounts
update-readme
revert-45-fix_sarif_duplicate_rule_id
knqyf263-patch-1
artifact_types
sarif-support-2
0.0.1
0.0.10
0.0.11
0.0.12
0.0.13
0.0.14
0.0.15
0.0.16
0.0.17
0.0.18
0.0.19
0.0.2
0.0.20
0.0.21
0.0.22
0.0.3
0.0.4
0.0.5
0.0.6
0.0.7
0.0.8
0.0.9
0.1.0
0.10.0
0.11.0
0.11.1
0.11.2
0.12.0
0.13.0
0.13.1
0.14.0
0.15.0
0.16.0
0.16.1
0.17.0
0.18.0
0.19.0
0.2.0
0.2.1
0.2.2
0.2.3
0.2.4
0.2.5
0.20.0
0.3.0
0.4.0
0.4.1
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.7.0
0.7.1
0.8.0
0.9.0
0.9.1
0.9.2
v0.0.10
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'master'
${ noResults }
Commit Graph

39 Commits (master)

Author SHA1 Message Date
Lukas Gravley 207cd40078
Fix docker host bug (#329) 
* Update entrypoint.sh

should be a value not boolean

* Update action.yaml

add example

* Update README.md
 1 month ago
Calin Marina 0f287db5d3
feat(image): add `--docker-host` option for GH Action users (#267) 
* add option to update docker-host via cli parameter

* chore: update test results

---------

Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com>
 2 months ago
uridium f72b7e8127
Make 'hide-progress' input working again (#323) 
* Make hide-progress input working again

* Unify 'hide-progress' default value
 2 months ago
Kyle Davies 22d2755f77
feature(config): add terraform variable files (#285) 
* Action now takes an input for terraform variable filess

* added tf-vars

* updated README.md

* Updated yamlconfig test to latest version of trivy output for that container

* updated for correct cpu type

* test trivy version change to 0.45.0

* run scan with correct parameters

* Added test for terraform tfvars

* Updated output for other tests

* use test data as path and updated tf vars to be relative

* removed quiet
 6 months ago
Pavel Kutáč 69cbbc0cbb
fix: mark image-ref attribute optional (#261) 8 months ago
Viktor Sadovnikov 1f0aa582c8
Rename security-checks to scanners (#211) 
* Renaming securityChecks to runners

* Renaming securityChecks to runners

* Renaming securityChecks to runners

* Correcting README
 1 year ago
AndreyLevchenko 1e0bef4613
fix(sarif): Add option to limit severities for sarif (aquasecurity#192) (#198) 1 year ago
simar7 503d3abc15
feat(yaml): Add support for trivy.yaml (#143) 
* feat(yaml): Add support for trivy.yaml

Signed-off-by: Simar <simar@linux.com>

* chore: fixing test using trivy v 0.30.0

* chore(deps): Update to use Trivy v0.30.2

Signed-off-by: Simar <simar@linux.com>

Co-authored-by: carolina valencia <krol3@users.noreply.github.com>
 2 years ago
simar7 7b7aa264d8
feat(SBOM): Support SBOM generation (#129) 
* feat(sbom): Support SBOM generation

Signed-off-by: Simar <simar@linux.com>

* Update README.md

Co-authored-by: Itay Shakury <itay@itaysk.com>

* feat(sbom): Send results within the entrypoint.sh

* fix(sbom): Fix leading whitespaces for format var.

Signed-off-by: Simar <simar@linux.com>

* docs(sbom): Update README.md

* docs(sbom): Update README.md

* chore(trivy): Bump Trivy version to 0.29.1

Signed-off-by: Simar <simar@linux.com>

* feat(sbom): Change to fs scan.

Signed-off-by: Simar <simar@linux.com>

* fix(tests): Update SARIF goldenfile

Co-authored-by: Itay Shakury <itay@itaysk.com>
 2 years ago
nleconte-csgroup 63b6e4c61b
docs: added missing HTML template and removed deprecated SARIF template (#132) 
* docs: add missing template

* docs: add missing template and remove deprecated

Add missing HTML template
Remove deprecated SARIF template

* docs: remove deprecated SARIF template
 2 years ago
Achton Smidt Winther 4b3b5f928b
Add support for --ignorefile option (.trivyignore) (#122) 
* Add support for supplying one or more .trivyignore files.

* Fix gitignore for test data.

* Add test for trivyignores option.

* Be explicit about the trivy options we use during testing.

* Add documentation of trivyignores option.
 2 years ago
oranmoshai 9fbcc91008 (feat) Add support for security-checks flag 
When using fs mode add option to list of what security issues to detect
 2 years ago
Masayoshi Mizutani 8f4c7160b4
feat: Add list-all-pkgs option (#88) 2 years ago
gustavomonarin 9ec80b5796
feat(#59) add support to skip files (#60) 
* feat(#59) Add support to skip files

closes #59

* Fix skipFiles parameter check

The check should be if present not if enabled.
 3 years ago
Simar 101d9bacf6
Update action.yaml 3 years ago
Brandon Sorgdrager 9438b49cc3
Enable config scanning (#56) 
* Bump trivy image to enable use of config scan-type

* move --no-progress switch behind input arg and set default

* prevent unrelated args from passing with config scan-type

* fix invalid option passing

* set artifactRef if scanType = config

* Add workflow example for IAC/YAML scanning

* Update README.md

Co-authored-by: Simar <1254783+simar7@users.noreply.github.com>

* Update README.md

Co-authored-by: Simar <1254783+simar7@users.noreply.github.com>

* clean hideProgress input

Co-authored-by: Simar <1254783+simar7@users.noreply.github.com>
 3 years ago
Anand Gautam 09b815c470
feat: add ignore-policy option to filter vulnerabilities (#48) 
* feat: add ignore-policy option to filter vulnerabilities

* fix: format README
 3 years ago
Donald Piret b38389f8ef
feat: add support for cache dire and timeout inputs (#35) 3 years ago
rahul2393 e2054f8b6a
Added input option support (#34) 
* Added input option support

* Fix position of input flag

* update readme

* Update README.md

Co-authored-by: Simarpreet Singh <simar@linux.com>
 3 years ago
Anand Gautam c6431cf821
Feat/add skip dirs option (#33) 
Fixes: https://github.com/aquasecurity/trivy-action/issues/32
 3 years ago
rahul2393 1d28acf359
Add scan type as option (#27) 
* Add scan type as option

* Fix exitCode

* remove all options

* Add default value to scanRef and improve shell

* print args

* fix description.

* More changes
 3 years ago
Chris Aumann 7684771c94
Add vuln-type parameter (#19) 
Co-authored-by: Simarpreet Singh <simar@linux.com>
 3 years ago
Simarpreet Singh de7cb7d4ba
Update action.yaml 
Co-authored-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Simarpreet Singh 9403afcefd
Update action.yaml 
Update title to include Aqua Security for searchability purposes.
 4 years ago
Simarpreet Singh 4edb45e6ff
docs: Fix docs and add improved example repo 
Signed-off-by: Simarpreet Singh <simar@linux.com>
 4 years ago
Simarpreet Singh 3fadcda6be
action: Add template option 
Signed-off-by: Simarpreet Singh <simar@linux.com>
 4 years ago
Simarpreet Singh d424596f39
action: Change option to template instead 
Signed-off-by: Simarpreet Singh <simar@linux.com>
 4 years ago
Simarpreet Singh 6b9375bd16
sarif: Add support for sarif output 
Signed-off-by: Simarpreet Singh <simar@linux.com>
 4 years ago
Zois Pagoulatos f498173417
feat: Add support for `--ignore-unfixed` flag (#10) 
Resolves: #9
 4 years ago
Daniel Pacak 1eb53c0425 docs: Update README.md 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak e09a3cf5ca fix: Use the latest version of Trivy 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak 1c67427335
feat: Add severity arg (#5) 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak 74538091fa
docs: Update README.md (#4) 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak 7991a69583
chore: Update action metadata (#3) 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak 677942f9f7
feat: Add exit-code to Trivy args (#1) (#2) 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak 1ca910e62d
feat: Add exit-code to Trivy args (#1) 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak 1a6fec9b14 fix: Use unique action name 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak 8103665175 refactor: Do not use Dockerfile 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago
Daniel Pacak 29696a7dea chore: Init project 
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
 4 years ago