-
Notifications
You must be signed in to change notification settings - Fork 45
Open
Description
When the action fails, it add a wrongly formatted message
` - name: Analyze for critical and high CVEs
id: docker-scout-scan
uses: docker/scout-action@v1
with:
command: quickview,cves,recommendations,sbom
image: "${{ inputs.container_image_destination }}:${{ inputs.container_image_destination_tag }}"
sarif-file: docker-scout_scan.sarif
summary: true
exit-code: true
debug: ${{ env.ACTION_STEP_DEBUG == 'true' }}
dockerhub-user: ${{inputs.TOOL_DOCKERHUB_REGISTRY_USER}}
dockerhub-password: ${{inputs.TOOL_DOCKERHUB_REGISTRY_PASS}}
# credentials needed to pull private (base) images
registry-user: ${{inputs.ARTIFACTORY_USER }}
registry-password: ${{inputs.ARTIFACTORY_PASS }}
output: docker-scout_sbom.json
format: spdx

Metadata
Metadata
Assignees
Labels
No labels