CloudBees action: Scan with Snyk Container

Use this action to scan image binaries with the Snyk Container scanner, to identify and fix security vulnerabilities.

Inputs

Table 1. Input details

Input name	Data type	Required?	Description
orgname	String	Yes	The Snyk Container username.
token	String	Yes	The Snyk Container client secret.
image-location	String	Yes	The container image location.
image-tag	String	Yes	The container image tag.

Usage example

In your YAML file, add:

      - name: Scan with Snyk Container
        uses: cloudbees-io/snyk-scan-container@v1
        with:
          orgname: "snyk_username"
          token: ${{ secrets.SNYK_SECRET }}
          image-location: ${{ vars.SNYK_ASSET_IDENTIFIER }}
          image-tag: ${{ vars.SNYK_PROFILE_IDENTIFIER }}

License

This code is made available under the MIT license.

References

• Learn more about using actions in CloudBees workflows.

• Learn about the CloudBees platform.