sec-actions/setup-db

Setup DB Action

A reusable Gitea Action that sets up the osv-scanner offline vulnerability database, restoring from cache if available.

Note: This action only sets up the database. osv-scanner itself must be installed separately (e.g., using the setup-osv action). Subsequent steps receive OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY via the environment.

Usage

Basic Usage

- name: Setup DB
  uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-db@0.0.1

Complete Example

name: Security Scan
on: [push, pull_request]

jobs:
  security:
    runs-on:
      - ubuntu-latest
      - linux_amd64
    steps:
      - uses: actions/checkout@v4
      - name: Setup OSV Scanner
        uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-osv@0.0.1
        with:
          version: "v2.4.0"
          amd64-digest: "15314940c10d26af9c6649f150b8a47c1262e8fc7e17b1d1029b0e479e8ed8a0"
          arm64-digest: "44e580752910f0ff36ec99aff59af20f65df1e859aa31e5605a8f0d055b496e9"
      - name: Setup DB
        id: setup-db
        uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-db@0.0.1
      - name: Scan for vulnerabilities
        run: osv-scanner scan source --offline-vulnerabilities -r .

Inputs

Input	Description	Required	Default
cache-dir	Path used as OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY	No	${{ runner.temp }}/osv-scanner
ecosystems	Comma-separated OSV ecosystems to download; empty downloads all ecosystems	No	(all)

Outputs

Output	Description
cache-dir	Path to the osv-scanner local DB cache directory