Anchore Container Scan

Version updated for https://github.com/anchore/scan-action to version v7.2.3.

  • This publisher is shown as ‘verified’ by GitHub.
  • This action is used across all versions by 8,554 repositories.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

This GitHub Action leverages the Grype vulnerability scanner to detect security vulnerabilities in files, directories, container images, or SBOMs during CI/CD workflows. It automates vulnerability scanning to ensure software integrity before deployment, with options to fail builds based on configurable severity thresholds. Key features include local scanning without external data transmission, support for various Linux distributions and programming languages, and detailed vulnerability reporting.

Release notes

New in scan-action v7.2.3