In this action, Trivy scans the dependency files such as package-lock.json and go.sum in your repository, then create GitHub issues according to the result.
- uses: knqyf263/trivy-issue-action@v0.0.3
with:
# Label name
# Default: vulnerability (this label must be created in advance)
label: ''
# Severities of vulnerabilities to be registered to GitHub Issues
# Default: 'CRITICAL'
severity: ''
# Comma separated list of directories where traversal is skipped
# Default: ''
# Example: 'tests, integration-tests'
skip-dirs: ''
# Assignees
# Default: ''
# Example: 'monalisa,hubot'
assignee: ''
# Project ID to which the created Issue will be tied.
# Default: ''
project-id: ''