In addition to being used as a CLI, aactl
can also be used as a builder.
project
- (required) GCP Project IDdigest
- (required) Image digestfile
- (required) Path to the vulnerability fileformat
- (required) Format of the vulnerability file
Below example, shows how to import vulnerabilities from previously generated report.
Make sure to use the latest tag release from here
uses: GoogleCloudPlatform/aactl@v0.3.4`
with:
type: vulnerability
project: ${{ env.PROJECT_ID }}
digest: ${{ steps.build.outputs.digest }}
file: ${{ steps.scan.outputs.output }}
format: ${{ steps.scan.outputs.format }}
Fully working example can be found in .github/workflows/import.yaml.