t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

slim down docs
CI / Dry-Run Setup Trivy (pull_request) Successful in 8s
Details

Browse Source
This commit is contained in:
Timo Behrendt
2025-09-25 19:23:06 +02:00
parent 0706f62920
commit 524beba84f
1 changed files with 2 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
setup-trivy/README.md
+2 -34
View File
@@ -2,25 +2,10 @@
A reusable Gitea Action that downloads and sets up the Trivy binary for vulnerability scanning. A reusable Gitea Action that downloads and sets up the Trivy binary for vulnerability scanning.
## Features
- 🚀 Easy setup with minimal configuration
- 🔧 Configurable Trivy version and architecture
- ✅ Input validation and error handling
- 🔄 Compatible with Gitea Actions and GitHub Actions
- ⚡ **Smart caching** - Uses native GitHub Actions cache with proper cache-hit detection
## Usage ## Usage
### Basic Usage ### Basic Usage
```yaml
- name: Setup Trivy
uses: your-username/trivy-actions@main/setup-trivy
```
### Advanced Usage
```yaml ```yaml
- name: Setup Trivy - name: Setup Trivy
uses: your-username/trivy-actions@main/setup-trivy uses: your-username/trivy-actions@main/setup-trivy
@@ -41,36 +26,19 @@ jobs:
- ubuntu-latest - ubuntu-latest
- linux_amd64 - linux_amd64
steps: steps:
- name: Checkout code - uses: actions/checkout@v4
uses: actions/checkout@v4
- name: Setup Trivy - name: Setup Trivy
uses: your-username/trivy-actions@main/setup-trivy uses: your-username/trivy-actions@main/setup-trivy
with: with:
version: "v0.66.0" version: "v0.66.0"
architecture: "amd64" architecture: "amd64"
- name: Scan for vulnerabilities
- name: Run Trivy vulnerability scanner
run: trivy fs . run: trivy fs .
``` ```
## Action Steps
The action is structured into logical steps for better maintainability:
1. **Cache Trivy binary** - Uses `actions/cache@v4` to restore cached binary
2. **Validate inputs** - Validates version and architecture parameters
3. **Download and install Trivy** - Only runs on cache miss, downloads and installs binary
4. **Add Trivy to PATH** - Ensures Trivy is available in subsequent steps
5. **Verify Trivy installation** - Confirms installation and shows version
## Inputs ## Inputs
| Input | Description | Required | Default | | Input | Description | Required | Default |
| -------------- | ----------------------------------------- | -------- | --------- | | -------------- | ----------------------------------------- | -------- | --------- |
| `version` | Trivy version to download (e.g., v0.66.0) | No | `v0.66.0` | | `version` | Trivy version to download (e.g., v0.66.0) | No | `v0.66.0` |
| `architecture` | System architecture (amd64, arm64) | No | `amd64` | | `architecture` | System architecture (amd64, arm64) | No | `amd64` |
## Supported Platforms
- **Linux**: amd64, arm64