Skip to content
shield

GitHub Action

Vilicus Scan

v0.0.1 Latest version

Vilicus Scan

shield

Vilicus Scan

Scans container images for vulnerabilities using Vilicus

Installation

Copy and paste the following snippet into your .yml file.

 
              
- name: Vilicus Scan

              
  uses: edersonbrilhante/[email protected]
Learn more about this action in edersonbrilhante/vilicus-github-action

Choose a version

Vilicus Scan

Container scanning

Scan can be done using remote image and local image.

Using a remote repository such as docker.io the image will be docker.io/your-organization/image:tag:

 - name: Scan image
   uses: edersonbrilhante/vilicus-github-action@main
   with:
     image: "docker.io/myorganization/myimage:tag"

And to use a local image its need to tag as localhost:5000/image:tag:

 - name: Scan image
   uses: edersonbrilhante/vilicus-github-action@main
   with:
     image: "localhost:5000/myimage:tag"

Action Inputs

Input Name Description Default Value
image The image to scan N/A

Example Workflows

Complete example with steps for cleaning space, building local image, Vilicus scanning, and uploading results to GitHub Security

name: Container Image CI
on: [push]
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Maximize build space
        uses: easimon/maximize-build-space@v3
        with:
          remove-dotnet: 'true'
          remove-android: 'true'
          remove-haskell: 'true'

      - name: Checkout branch
        uses: actions/checkout@v2

      - name: Build the Container image
        run: docker build -t localhost:5000/local-image:${GITHUB_SHA} . 
      
      - name: Vilicus Scan
        uses: edersonbrilhante/vilicus-github-action@main
        with:
          image: localhost:5000/local-image:${{ github.sha }}

      - name: Upload results to github security
        uses: github/codeql-action/upload-sarif@v1
        with:
          sarif_file: artifacts/results.sarif