Skip to content

Container Scan from Config

uses: huntridge-labs/argus/.github/workflows/container-scan-from-config.yml@1.1.0

Pipeline

3 jobs (1 matrix) · scroll to zoom · drag to pan

Triggers

  • Manual dispatch
  • Reusable (called by other workflows)

Permissions

Scope Access
contents read
security-events write
actions read
pull-requests write
id-token write
packages read

Inputs

Input Description Required Default
config_file Path to container config file (YAML, JSON, or JS) string No examples/container-config.example.yml

Jobs

parse-config — Parse Container Config

Runs on: ubuntu-latest

Steps:

  1. Checkout repository — actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
  2. Parse container config — huntridge-labs/argus/.github/actions/parse-container-config@1.1.0

Actions used:

scan-containers — Scan ${{ matrix.name }}

Runs on: ubuntu-latest · Depends on: parse-config · Condition: needs.parse-config.outputs.has_containers == 'true'

Steps:

  1. Checkout repository — actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
  2. Set up Python — actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
  3. Install argus dependencies
  4. Authenticate to container registry
  5. Run container security scanners via argus CLI

scan-summary — Container Scan Summary

Runs on: ubuntu-latest · Depends on: parse-config, scan-containers · Condition: always()

Steps:

  1. Generate container scan summary — huntridge-labs/argus/.github/actions/scanner-container-summary@1.1.0

Actions used:

All Composite Actions Referenced