Skip to content

Container Scan from Config

uses: huntridge-labs/argus/.github/workflows/container-scan-from-config.yml@1.12.2

Pipeline

3 jobs (1 matrix) · scroll to zoom · drag to pan

Triggers

  • Manual dispatch
  • Reusable (called by other workflows)

Permissions

Scope Access
contents read
security-events write
actions read
pull-requests write
id-token write
packages read

Inputs

Input Description Required Default
config_file Path to container config file (YAML, JSON, or JS) string No examples/container-config.example.yml

Jobs

parse-config — Parse Container Config

Runs on: ubuntu-latest

Steps:

  1. Checkout repository — actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
  2. Parse container config — huntridge-labs/argus/.github/actions/parse-container-config@1.12.2

Actions used:

scan-containers — Scan ${{ matrix.name }}

Runs on: ubuntu-latest · Depends on: parse-config · Condition: needs.parse-config.outputs.has_containers == 'true'

Steps:

  1. Checkout repository — actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
  2. Set up Python — actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
  3. Install Argus — huntridge-labs/argus/.github/actions/setup-argus@1.12.2
  4. Authenticate to container registry
  5. Run container security scanners via argus CLI
  6. Upload container summary section — actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

scan-summary — Container Scan Summary

Runs on: ubuntu-latest · Depends on: parse-config, scan-containers · Condition: always()

Steps:

  1. Generate container scan summary — huntridge-labs/argus/.github/actions/security-summary@1.12.2

Actions used:

All Composite Actions Referenced