Feature: retrieve latest GitHub image tag/release

lazy-actions / gitrivy

GitHub Issue + Trivy Action

MIT License

54 stars 25 forks source link

Feature: retrieve latest GitHub image tag/release #54

Closed hazcod closed 4 years ago

hazcod commented 4 years ago

Would be nice if the Action would fetch the latest version of a docker container from a registry and use that for scanning. Having an automatically deploy process really prevents hardcoding the release version in the Action. latest is a bad practice.

homoluctus commented 4 years ago

@hazcod

Thanks. I think gitrivy is used in CI / CD, and as a schedule scanner. So, it is the user's role that specifies the latest version, not the gitrivy role.

hazcod commented 4 years ago

@homoluctus I mean that you typically have multiple versions of an image deployed, not always using :latest.