---
platform: linux
image_resource:
  type: registry-image
  source: {repository: docker.io/aquasec/trivy}

inputs:
  - name: docker-repo
  - name: image

run:
  path: ash
  args:
    - -euo
    - pipefail
    - -c
    - |
      trivy image \
        --ignore-unfixed \
        --severity HIGH,CRITICAL \
        --exit-code ${EXIT_CODE} \
        --ignorefile "${TRIVY_IGNORE}" \
        --input "${INPUT_TAR}"

params:
  TRIVY_IGNORE: docker-repo/.trivyignore
  INPUT_TAR: image/image.tar
  EXIT_CODE: 1