Skip to content

It seems like there is no way to write the output in a chosen format to a file/env #72

@abrie-stubber

Description

@abrie-stubber

The docker scout cves command supports the following --formats

--format string               Output format of the generated vulnerability report:
                                    - packages: default output, plain text with vulnerabilities grouped by packages
                                    - sarif: json Sarif output
                                    - spdx: json SPDX output
                                    - gitlab: json GitLab output
                                    - markdown: markdown output (including some html tags like collapsible sections)
                                    - sbom: json SBOM output

I believe many would like to choose their format and then write it to a file or the action env such that it can be used in later steps.
There does not seem to be any way to pass the output to following steps apart from the sarif-file option, which is not a very nice option if you want to do your own stuff.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions