Philipp/cve-differential
Public Access
1
0 Fork 0
generated from Philipp/template-git
Code Issues 1 Pull Requests 1 Actions Packages Releases 1 Activity

fix(template): remove misconfigurations and secrets sections from markdown.tpl #5

Merged
Philipp merged 2 commits from clean-markdown-template into main 2026-09-13 00:48:13 +02:00
Conversation 0 Commits 2 Files Changed 1
+18 -8
2 changed files with 18 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 5ffb2e9287 - Show all commits

No files matched your search

README.md
+2 -8
View File
@@ -27,6 +27,7 @@ A self-contained Gitea and GitHub Actions composite action that extracts multi-p
| `trivy-version` | Trivy version to install and verify | No | `0.74.0` | | `trivy-version` | Trivy version to install and verify | No | `0.74.0` |
| `output-delta` | Output path for the CVE delta Markdown report | No | `cve-delta.md` | | `output-delta` | Output path for the CVE delta Markdown report | No | `cve-delta.md` |
| `output-summary` | Output path for the full vulnerability Markdown summary | No | `cve-summary.md` | | `output-summary` | Output path for the full vulnerability Markdown summary | No | `cve-summary.md` |
| `write-summary` | Whether to append the generated reports to the job summary (`$GITHUB_STEP_SUMMARY`) | No | `true` |
--- ---
@@ -59,18 +60,11 @@ jobs:
tags: registry.example.com/my-app:git-${{ github.sha }} tags: registry.example.com/my-app:git-${{ github.sha }}
- name: Compare Vulnerabilities (Head vs Target) - name: Compare Vulnerabilities (Head vs Target)
uses: Philipp/cve-differential@main uses: https://git.horstenkamp.eu/Philipp/cve-differential@main
with: with:
head-image: registry.example.com/my-app:git-${{ github.sha }} head-image: registry.example.com/my-app:git-${{ github.sha }}
target-image: registry.example.com/my-app:latest target-image: registry.example.com/my-app:latest
target-branch: ${{ github.base_ref || 'main' }} target-branch: ${{ github.base_ref || 'main' }}
- name: Publish CVE Delta to Job Summary
if: always()
run: |
if [ -f cve-delta.md ]; then
cat cve-delta.md >> "$GITHUB_STEP_SUMMARY"
fi
``` ```
--- ---
action.yaml
+16
View File
@@ -24,6 +24,10 @@ inputs:
description: Output markdown file for full vulnerability summary description: Output markdown file for full vulnerability summary
required: false required: false
default: cve-summary.md default: cve-summary.md
write-summary:
description: Whether to append the generated reports to the job summary ($GITHUB_STEP_SUMMARY)
required: false
default: 'true'
outputs: outputs:
delta-report: delta-report:
@@ -184,3 +188,15 @@ runs:
--output "${{ inputs.output-summary }}" \ --output "${{ inputs.output-summary }}" \
"$primary_sbom" || true "$primary_sbom" || true
fi fi
- name: Publish Reports to Step Summary
shell: bash
run: |
if [ "${{ inputs.write-summary }}" = "true" ] && [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
if [ -f "${{ inputs.output-delta }}" ]; then
cat "${{ inputs.output-delta }}" >> "$GITHUB_STEP_SUMMARY"
fi
if [ -f "${{ inputs.output-summary }}" ]; then
cat "${{ inputs.output-summary }}" >> "$GITHUB_STEP_SUMMARY"
fi
fi