README.md

Vilicus Scan

Container scanning

Scan can be done using remote image and local image.

Using a remote repository such as docker.io the image will be docker.io/your-organization/image:tag:

 - name: Scan image
   uses: edersonbrilhante/vilicus-github-action@main
   with:
     image: "docker.io/myorganization/myimage:tag"

And to use a local image its need to tag as localhost:5000/image:tag:

 - name: Scan image
   uses: edersonbrilhante/vilicus-github-action@main
   with:
     image: "localhost:5000/myimage:tag"

Action Inputs

Input Name	Description	Default Value
image	The image to scan	N/A

Example Workflows

Complete example with steps for cleaning space, building local image, Vilicus scanning, and uploading results to GitHub Security

name: Container Image CI
on: [push]
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Maximize build space
        uses: easimon/maximize-build-space@v3
        with:
          remove-dotnet: 'true'
          remove-android: 'true'
          remove-haskell: 'true'

      - name: Checkout branch
        uses: actions/checkout@v2

      - name: Build the Container image
        run: docker build -t localhost:5000/local-image:${GITHUB_SHA} . 
      
      - name: Vilicus Scan
        uses: edersonbrilhante/vilicus-github-action@main
        with:
          image: localhost:5000/local-image:${{ github.sha }}

      - name: Upload results to github security
        uses: github/codeql-action/upload-sarif@v1
        with:
          sarif_file: artifacts/results.sarif