Scan docker images with reusable action

[pawelfraczyk]

Hello,

Is it possible with reusable action to scan docker images? I see only a possibility to add arguments.

I tried such a code but still action tries to scan a directory named 'image'

[another-rex]

I believe you should be able to scan images (depends on whether docker is available inside the github actions VM, I believe it is), but the command is scan image, not image. I.e.

osv-scanner scan image <image-name>
# or
osv-scanner scan image --archive <local-image-tar>

[pawelfraczyk]

I believe you should be able to scan images (depends on whether docker is available inside the github actions VM, I believe it is), but the command is scan image, not image. I.e.

osv-scanner scan image <image-name>
# or
osv-scanner scan image --archive <local-image-tar>

Hello again @another-rex I understand in this case I would need a custom GH action with a step to install the osv-scanner on the runner? It would be nice feature to be able to use the reusable action.