Skip to content

Latest commit

 

History

History
49 lines (42 loc) · 1.41 KB

README.md

File metadata and controls

49 lines (42 loc) · 1.41 KB

MCVS-docker-action

Mission Critical Vulnerability Scanner (MCVS) Docker Action is a custom GitHub Action that consists of the following steps:

  • YAML linting.
  • Dockerfile linting.
  • Determining image name and tag.
  • Docker image building.
  • Docker image linting.
  • Detecting waste in the docker image.
  • Code and docker image security scanning using Grype and Trivy.
  • Logging in and pushing the image to GitHub packages.

Usage

Create a .github/workflows/docker.yml file with the following content:

---
name: Docker
"on": push
permissions:
  contents: read
  packages: write
jobs:
  mcvs-docker-action:
    runs-on: ubuntu-20.04
    steps:
      - uses: actions/[email protected]
      - uses: schubergphilis/[email protected]
        with:
          dockle-accept-key: libcrypto3,libssl3
          token: ${{ secrets.GITHUB_TOKEN }}
Option Default Required
build-args
context x
dockle-accept-key x
images x
token x x
trivy-action-db x
trivy-action-java-db x

Note: If an x is registered in the Default column, refer to the action.yml for the corresponding value.