1+ image : docker.io/sctechdev/docker-security-scanner
2+ tag : master-c81e6d4
3+ version : 2.2
4+ description : Execute Twistlock image scan as build step
5+ keywords :
6+ - Twistlock 2.2
7+ home : https://hub.docker.com/r/sctechdev/docker-security-scanner/
8+ sources :
9+ - https://github.com/SC-TechDev/docker-security-scanner
10+ maintainers :
11+ - name : Dustin Van Buskirk
12+ email : dev@vanbuskirk.me
13+ - name : Varun Tagore
14+ email : rondevops@gmail.com
15+ icon : A URL to an SVG or PNG image to be used as an icon (optional)
16+ envs :
17+ - name : CF_METADATA
18+ type : required
19+ description : Boolean; combination with TL_UPLOAD stores Twistlock Report URL in TL_REPORT_URL var for Codefresh metadata annotation
20+ - name : TL_CONSOLE_HOSTNAME
21+ type : required
22+ description : Hostname or IP of Twistlock Console
23+ - name : TL_CONSOLE_PORT
24+ type : required
25+ description : Port of Twistlock Console
26+ - name : TL_CONSOLE_USERNAME
27+ type : required
28+ description : Username of Twistlock Console
29+ - name : TL_CONSOLE_PASSWORD
30+ type : required
31+ description : Password of Twistlock Console User
32+ - name : TL_ONLY
33+ type : required
34+ description : Twistlock Console Scan Only (No Nexus)
35+ - name : TL_TLS_ENABLED
36+ type : optional
37+ description : Boolean; Enable TLS connection to Twistlock Console
38+ - name : TL_HASH
39+ type : optional
40+ description : Hashing Algorithm to use
41+ - name : TL_UPLOAD
42+ type : optional
43+ description : Upload report to Twistlock Console and return URL (Overrides all other options only returns URL)
44+ - name : TL_DETAILS
45+ type : optional
46+ description : Prints an itemized list of each vulnerability found by the scanner
47+ - name : TL_ONLY_FIXED
48+ type : optional
49+ description : reports just the vulnerabilites that have fixes available
50+ - name : TL_COMPLIANCE_THRESHOLD
51+ type : optional
52+ description : [ low, medium, high ] sets the the minimal severity compliance issue that returns a fail exit code
53+ - name : TL_VULNERABILITY_THRESHOLD
54+ type : optional
55+ description : [ low, medium, high, critical ] sets the minimal severity vulnerability that returns a fail exit code
56+ volumes :
57+ - name : /var/run/docker.sock:/var/run/docker.sock
58+ required : true
59+ description : Docker socket for DIND
60+ - name : /var/lib/docker:/var/lib/docker
61+ required : true
62+ description : Docker lib access for DIND
63+ - name : ' ${{CF_VOLUME_NAME}}:/codefresh/volume'
64+ required : false
65+ description : Volume required if setting Docker image metadata using Codefresh
0 commit comments