# Setup DB Action A reusable Gitea Action that sets up the osv-scanner offline vulnerability database, restoring from cache if available. **Note:** This action only sets up the database. osv-scanner itself must be installed separately (e.g., using the `setup-osv` action). Subsequent steps receive `OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY` via the environment. ## Usage ### Basic Usage ```yaml - name: Setup DB uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-db@0.0.1 ``` ### Complete Example ```yaml name: Security Scan on: [push, pull_request] jobs: security: runs-on: - ubuntu-latest - linux_amd64 steps: - uses: actions/checkout@v4 - name: Setup OSV Scanner uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-osv@0.0.1 with: version: "v2.4.0" amd64-digest: "15314940c10d26af9c6649f150b8a47c1262e8fc7e17b1d1029b0e479e8ed8a0" arm64-digest: "44e580752910f0ff36ec99aff59af20f65df1e859aa31e5605a8f0d055b496e9" - name: Setup DB id: setup-db uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-db@0.0.1 - name: Scan for vulnerabilities run: osv-scanner scan source --offline-vulnerabilities -r . ``` ## Inputs | Input | Description | Required | Default | | ------------- | --------------------------------------------------------------------------- | -------- | -------------------------------- | | `cache-dir` | Path used as `OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY` | No | `${{ runner.temp }}/osv-scanner` | | `ecosystems` | Comma-separated OSV ecosystems to download; empty downloads all ecosystems | No | _(all)_ | ## Outputs | Output | Description | | ----------- | ------------------------------------------------ | | `cache-dir` | Path to the osv-scanner local DB cache directory |