kyberorg / harbor-scan-report Goto Github PK
View Code? Open in Web Editor NEWThis action makes comment with Harbor scan results for given docker image
License: The Unlicense
harbor-scan-report's People
Contributors
Stargazers
Watchers
harbor-scan-report's Issues
Comment mode
New comment or update existing
Report: Show only fixable CVEs
Idea is to introduce yet another bool parameter which forces hsl to report only fixable vulnerabilities.
Add Job Summary as well
Update screenshots in Readme
Awesome solution
very nice GitHub Action,
would love to see it listed in the list https://github.com/container-registry/awesome-harbor
Also, I would like to invite you to demo your solution at our next Harbor community meeting here is more info https://github.com/goharbor/community/blob/main/MEETING_SCHEDULE.md
Make timing options adjustable
Currently they are:
- wait interval
- number of attempts
Also might be good to introduce timeout option, so:
MaxRetryAttempts = timeout/wait interval
Sorting in Report
Vulnerabilities in Report (one printed to log/console) should be sorted.
Currently I'd suggest to have 2 sorting ways:
- sort by Harbor's Severity (default)
- sort by CVSSv3 Score
Do not fail when CVE is in allowed list
Wierd report
Harbor Image Vulnerability Report
Results for image [kio.ee/yalsee/yalsee:qa](https://kio.ee/harbor/projects/yalsee/repositories/yalsee/artifacts-tab)
✔️ Total 0 vulnerabilities found
Scanned with from ``
Report generated at 1.1.0001 00:00:00+0000
Do not fail job when vulnerability is not fixable
Sometimes vulnerability has no fix version. In this case job should not fail.
GitHub comment: add spacing
Currently it is very dense comment
Customized report title
For example I want to have Docker Image Vulnerability Report instead
Fix logging
Run debug only if Github Action debug logging is on
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.