Philipp/cve-differential
Public Access
1
0 Fork 0
generated from Philipp/template-git
Code Issues 1 Pull Requests 1 Actions Packages Releases 1 Activity

Update README.md #8

Merged
Philipp merged 2 commits from philipp-patch-1 into main 2026-09-13 01:23:49 +02:00
Conversation 0 Commits 2 Files Changed 1
+2 -5
1 changed files with 2 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 9638e61534 - Show all commits
README.md
+2 -5
View File
@@ -1,4 +1,4 @@
# CVE Differential (`cve-differential`) # CVE Differential
A self-contained Gitea and GitHub Actions composite action that extracts multi-platform SBOM attestations from container images, runs vulnerability scans with [Trivy](https://github.com/aquasecurity/trivy), and produces a set-based CVE delta report between a head image and a target baseline image. A self-contained Gitea and GitHub Actions composite action that extracts multi-platform SBOM attestations from container images, runs vulnerability scans with [Trivy](https://github.com/aquasecurity/trivy), and produces a set-based CVE delta report between a head image and a target baseline image.
@@ -46,16 +46,13 @@ jobs:
build-and-scan: build-and-scan:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Build and Push Head Container Image - name: Build and Push Head Container Image
uses: docker/build-push-action@v5 uses: docker/build-push-action@v5
with: with:
context: . context: .
push: true push: true
sbom: true sbom: true
platforms: linux/amd64,linux/arm64
tags: registry.example.com/my-app:git-${{ github.sha }} tags: registry.example.com/my-app:git-${{ github.sha }}
- name: Compare Vulnerabilities (Head vs Target) - name: Compare Vulnerabilities (Head vs Target)