Docker Image Ops

What it does

This action scans, pushes, and promotes Docker images between container registries.

How it works

The action takes an image from a registry or a previous Docker build action. It can scan the image with Trivy, copy it to another registry, promote it under a new tag, or delay mirroring with a quarantine period.

Docker Image Ops Action Features

• Use an image from a supported registry or a previous Docker build action
• Scan images for vulnerabilities, secrets, misconfigurations, and license issues
• Select severity levels and optionally fail only on fixable findings
• Suppress accepted findings with scoped, expiring ignore rules
• Push or promote images to supported container registries
• Delay mirroring with a configurable quarantine period
• Configure the action in YAML mode using the Docker Image Ops YAML parameters
• Manage the action with the Docker Image Ops API