feat: add setup-trivy (#1)

Reviewed-on: t.behrendt/trivy-actions#1 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-09-25 19:24:18 +02:00
parent 075c3c3ef3
commit 28b62b04e8
4 changed files with 171 additions and 0 deletions
@@ -0,0 +1,44 @@
+# Setup Trivy Action
+
+A reusable Gitea Action that downloads and sets up the Trivy binary for vulnerability scanning.
+
+## Usage
+
+### Basic Usage
+
+```yaml
+- name: Setup Trivy
+  uses: your-username/trivy-actions@main/setup-trivy
+  with:
+    version: "v0.66.0" # Optional: Trivy version (default: v0.66.0)
+    architecture: "amd64" # Optional: amd64 or arm64 (default: amd64)
+```
+
+### Complete Example
+
+```yaml
+name: Security Scan
+on: [push, pull_request]
+
+jobs:
+  security:
+    runs-on:
+      - ubuntu-latest
+      - linux_amd64
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Trivy
+        uses: your-username/trivy-actions@main/setup-trivy
+        with:
+          version: "v0.66.0"
+          architecture: "amd64"
+      - name: Scan for vulnerabilities
+        run: trivy fs .
+```
+
+## Inputs
+
+| Input          | Description                               | Required | Default   |
+| -------------- | ----------------------------------------- | -------- | --------- |
+| `version`      | Trivy version to download (e.g., v0.66.0) | No       | `v0.66.0` |
+| `architecture` | System architecture (amd64, arm64)        | No       | `amd64`   |