Vilicus Scan
ActionsTags
(2)
Scan can be done using remote image and local image.
Using a remote repository such as docker.io the image will be docker.io/your-organization/image:tag:
- name: Scan image
uses: edersonbrilhante/vilicus-github-action@main
with:
image: "docker.io/myorganization/myimage:tag"And to use a local image its need to tag as localhost:5000/image:tag:
- name: Scan image
uses: edersonbrilhante/vilicus-github-action@main
with:
image: "localhost:5000/myimage:tag"| Input Name | Description | Default Value |
|---|---|---|
image |
The image to scan | N/A |
Complete example with steps for cleaning space, building local image, Vilicus scanning, and uploading results to GitHub Security
name: Container Image CI
on: [push]
jobs:
build:
runs-on: ubuntu-latest
steps:
- name: Maximize build space
uses: easimon/maximize-build-space@v3
with:
remove-dotnet: 'true'
remove-android: 'true'
remove-haskell: 'true'
- name: Checkout branch
uses: actions/checkout@v2
- name: Build the Container image
run: docker build -t localhost:5000/local-image:${GITHUB_SHA} .
- name: Vilicus Scan
uses: edersonbrilhante/vilicus-github-action@main
with:
image: localhost:5000/local-image:${{ github.sha }}
- name: Upload results to github security
uses: github/codeql-action/upload-sarif@v1
with:
sarif_file: artifacts/results.sarif
Vilicus Scan is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.
Tags
(2)Vilicus Scan is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.