Run Trivy Image Scanner GitHub Action

This GitHub Action scans Docker images for vulnerabilities, secrets, licenses, and misconfigurations using Trivy.

Inputs

Input Name	Description	Required	Type
image	The Docker image to scan.	Yes	string

Usage

This action can be used in other workflows with workflow_call. Here’s an example:

jobs:
  scan:
    uses:DevFW-CICD/vulnerability-scan/.github/workflows/trivy-image-scan.yml@main
    with:
      image: 'my-registry.com/project/image:latest'