{"id":20458991,"url":"https://github.com/rennf93/parse-docker-scout-output","last_synced_at":"2025-03-21T02:12:00.189Z","repository":{"id":246984009,"uuid":"824731410","full_name":"rennf93/parse-docker-scout-output","owner":"rennf93","description":"A GitHub Action designed to parse the output from Docker Scout.","archived":false,"fork":false,"pushed_at":"2025-03-17T21:57:22.000Z","size":38,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-03-17T22:54:46.756Z","etag":null,"topics":["monitoring","reporting"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rennf93.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-07-05T20:00:35.000Z","updated_at":"2025-03-17T21:57:19.000Z","dependencies_parsed_at":"2024-07-06T02:57:33.847Z","dependency_job_id":"ee89dae3-3e9e-4b16-94e3-81d25cdbe702","html_url":"https://github.com/rennf93/parse-docker-scout-output","commit_stats":null,"previous_names":["rennf93/parse-docker-scout-output"],"tags_count":10,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rennf93%2Fparse-docker-scout-output","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rennf93%2Fparse-docker-scout-output/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rennf93%2Fparse-docker-scout-output/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rennf93%2Fparse-docker-scout-output/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rennf93","download_url":"https://codeload.github.com/rennf93/parse-docker-scout-output/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":244722750,"owners_count":20499153,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["monitoring","reporting"],"created_at":"2024-11-15T12:14:39.530Z","updated_at":"2025-03-21T02:12:00.170Z","avatar_url":"https://github.com/rennf93.png","language":"Python","readme":"# parse-docker-scout-output\n\n`parse-docker-scout-output` is a GitHub Action designed to parse the output from Docker Scout. It processes Docker Scout's recommendations, CVEs, and SBOM outputs, and uploads the results as PDF to your GitHub repository. This action is ideal for enhancing the visibility of Docker image security within your projects.\n\n## Features\n\n- Parses Docker Scout recommendations, CVEs, and SBOM outputs\n- Uploads the results as PDF to your GitHub repository\n- Sets environment variables with the URLs of these images\n\n## Outputs\n\nThis action does not produce direct outputs but uploads PDFs to the repository and sets environment variables with the URLs of these PDFs.\n\n## Usage\n\nTo use this action in your workflow, add the following step:\n\n```yaml\n- name: Parse Docker Scout Output\n  uses: rennf93/parse-docker-scout-output@v1\n  with:\n    PAT: ${{ secrets.PAT }}\n    TARGET_REPO: ${{ secrets.TARGET_REPO }}\n    TARGET_BRANCH: ${{ secrets.TARGET_BRANCH }}\n    TARGET_FOLDER: ${{ secrets.TARGET_FOLDER }}\n    RECOMMENDATIONS: ${{ steps.docker-scout.outputs.recommendations }}\n    CVES_OUTPUT: ${{ steps.docker-scout.outputs.cves }}\n    SBOM_OUTPUT: ${{ steps.docker-scout.outputs.sbom }}\n    IMAGE_DETAILS: ${{ steps.docker-scout.outputs.image_details }}\n```\n\n## Inputs\n\n| Input Name         | Description                              | Required |\n|--------------------|------------------------------------------|----------|\n| `TARGET_REPO`| Target GitHub Repo to upload images to   | true     |\n| `TARGET_BRANCH`  | Target Repo's Branch to upload images to | true     |\n| `TARGET_FOLDER`      | Folder in the repository to upload images to | true     |\n| `RECOMMENDATIONS`  | Docker Scout recommendations HTML output | true     |\n| `CVES_OUTPUT`      | Docker Scout CVEs HTML output            | false    |\n| `SBOM_OUTPUT`      | Docker Scout SBOM HTML output            | false    |\n| `IMAGE_DETAILS`    | Docker image details JSON                | false    |\n| `PAT`     | GitHub Personal Access Token for authentication          | true     |\n\n## Example Workflow\n\nHere is an example of how to integrate this action into a GitHub workflow:\n\n```yaml\nname: Example Workflow\n\non:\n  push:\n    branches:\n      - main\njobs:\n  build:\n    runs-on: ubuntu-latest\n    steps:\n      - name: Checkout repository\n        uses: actions/checkout@v2\n\n      - name: Docker Scout Analysis\n        id: docker-scout\n        uses: docker/scout-action@v1.9.3\n        with:\n          command: cves,recommendations,compare,sbom\n          image: \u003cimage-name\u003e:\u003cimage-tag\u003e\n\n      - name: Parse Docker Scout Output\n        uses: rennf93/parse-docker-scout-output@v1.5\n        with:\n          PAT: ${{ secrets.PAT }}\n          TARGET_REPO: ${{ secrets.TARGET_REPO }}\n          TARGET_BRANCH: ${{ secrets.TARGET_BRANCH }}\n          TARGET_FOLDER: ${{ secrets.TARGET_FOLDER }}\n          RECOMMENDATIONS: ${{ steps.docker-scout.outputs.recommendations }}\n          CVES_OUTPUT: ${{ steps.docker-scout.outputs.cves }}\n          SBOM_OUTPUT: ${{ steps.docker-scout.outputs.sbom }}\n          IMAGE_DETAILS: ${{ steps.docker-scout.outputs.image_details }}\n```\n\n## License\n\nThis project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frennf93%2Fparse-docker-scout-output","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frennf93%2Fparse-docker-scout-output","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frennf93%2Fparse-docker-scout-output/lists"}