Docker vulnerability scan #670
pathearddocker_vulnerability_scan.yml
on: schedule
docker-vulnerability-scan
47s
Annotations
3 warnings
|
docker-vulnerability-scan
Unexpected input(s) 'security-checks', valid inputs are ['entryPoint', 'args', 'scan-type', 'image-ref', 'input', 'scan-ref', 'exit-code', 'ignore-unfixed', 'vuln-type', 'severity', 'format', 'template', 'output', 'skip-dirs', 'skip-files', 'cache-dir', 'timeout', 'ignore-policy', 'hide-progress', 'list-all-pkgs', 'scanners', 'trivyignores', 'artifact-type', 'github-pat', 'trivy-config', 'tf-vars', 'limit-severities-for-sarif', 'docker-host']
|
|
docker-vulnerability-scan
The following actions use a deprecated Node.js version and will be forced to run on node20: aws-actions/configure-aws-credentials@master, aws-actions/amazon-ecr-login@5a88a04c91d5c6f97aae0d9be790e64d9b1d47b7. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
docker-vulnerability-scan
Your docker password is not masked. See https://github.com/aws-actions/amazon-ecr-login#docker-credentials for more information. The default value of the 'mask-password' input has changed from 'false' to 'true' in the v2 release. See https://github.com/aws-actions/amazon-ecr-login/issues/526 for more information.
|