search

Azure / container-scan

A GitHub action to help you scan your docker image for vulnerabilities
MIT License
219 stars 42 forks source link

Set output variable with boolean scan result #141

Open olarende-tink opened 2 years ago

olarende-tink commented 2 years ago

Currently, the container-scan step sets the output variable steps.container-scan.outputs.scan-report-path which is useful for finding the report file for uploading purposes. However, I'd like to have an output showing whether the scan passed or failed (found/did not find vulnerabilities and best practice violations) so that I can use that as the input for a conditional expression in a later workflow step (e.g. post a message in a pull request comments thread if the scan failed).

My suggestion is to set an output named steps.container-scan.outputs.scan-result to true or false depending on the scan outcome. Ideally it would also take the severity-threshold input into account as well.

github-actions[bot] commented 2 years ago

This issue is idle because it has been open for 14 days with no activity.