Public Access
generated from Philipp/template-git
Update README.md #8
@@ -1,4 +1,4 @@
|
|||||||
# CVE Differential (`cve-differential`)
|
# CVE Differential
|
||||||
|
|
||||||
A self-contained Gitea and GitHub Actions composite action that extracts multi-platform SBOM attestations from container images, runs vulnerability scans with [Trivy](https://github.com/aquasecurity/trivy), and produces a set-based CVE delta report between a head image and a target baseline image.
|
A self-contained Gitea and GitHub Actions composite action that extracts multi-platform SBOM attestations from container images, runs vulnerability scans with [Trivy](https://github.com/aquasecurity/trivy), and produces a set-based CVE delta report between a head image and a target baseline image.
|
||||||
|
|
||||||
@@ -46,8 +46,6 @@ jobs:
|
|||||||
build-and-scan:
|
build-and-scan:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout repository
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
|
|
||||||
- name: Build and Push Head Container Image
|
- name: Build and Push Head Container Image
|
||||||
uses: docker/build-push-action@v5
|
uses: docker/build-push-action@v5
|
||||||
@@ -55,7 +53,6 @@ jobs:
|
|||||||
context: .
|
context: .
|
||||||
push: true
|
push: true
|
||||||
sbom: true
|
sbom: true
|
||||||
platforms: linux/amd64,linux/arm64
|
|
||||||
tags: registry.example.com/my-app:git-${{ github.sha }}
|
tags: registry.example.com/my-app:git-${{ github.sha }}
|
||||||
|
|
||||||
- name: Compare Vulnerabilities (Head vs Target)
|
- name: Compare Vulnerabilities (Head vs Target)
|
||||||
|
|||||||
Reference in new issue
Block a user