vulnerability-scan/README.md

# Run Trivy Image Scanner GitHub Action

This GitHub Action scans Docker images for vulnerabilities, secrets, licenses, and misconfigurations using [Trivy](https://github.com/aquasecurity/trivy).

## Inputs

| Input Name | Description           | Required | Type   |
|------------|-----------------------|----------|--------|
| `image`    | The Docker image to scan. | Yes      | string |

## Usage

This action can be used in other workflows with `workflow_call`. Here’s an example:

```yaml
jobs:
  scan:
    uses:DevFW-CICD/vulnerability-scan/.github/workflows/trivy-image-scan.yml@main
    with:
      image: 'my-registry.com/project/image:latest'
```