Adapt to json v1 format (#78)

* Adapt action to support JSON V1 format
* Bump CLI to 1.22.3
* Update docs and minimum version to 1.18.0
* Bump to version 6.0.0
* Update documentation to use @v6 instead of @v5

Author: airadier

.github/workflows/ci-scan.yaml

@@ -91,7 +91,7 @@ jobs:
         continue-on-error: true
         with:
           # Old scanner version
-          cli-scanner-version: 1.8.1
+          cli-scanner-version: 1.18.0
           # Tag of the image to analyse
           image-tag: sysdiglabs/dummy-vuln-app:latest
           # API token for Sysdig Scanning auth

README.md

@@ -10,7 +10,7 @@ This action performs analysis on a specific container image and posts the result
 |------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------|
 | `cli-scanner-url`            | URL to `sysdig-cli-scanner` binary download. The action will detect the runner OS and architecture. For more info about the Sysdig CLI Scanner download visit [the official documentation](https://docs.sysdig.com/en/docs/installation/sysdig-secure/install-vulnerability-cli-scanner/).                               |                           |
 | `mode`                       | Mode of operation. Can be "vm" or "iac".                                                                                                                                                                                                                                                                                 | `vm`                      |
-| `cli-scanner-version`        | Custom sysdig-cli-scanner version to download. If using iac mode, minimum required version is 1.9.0. Please note that for VM mode the Action has only been tested with the current default version and it is not guaranteed that it will work as expected with other versions.                                           | `1.22.1`                  |
+| `cli-scanner-version`        | Custom sysdig-cli-scanner version to download. Minimum required version is 1.18.0. Please note that for VM mode the Action has only been tested with the current default version and it is not guaranteed that it will work as expected with other versions.                                           | `1.22.3`                  |
 | `registry-user`              | Registry username to authenticate to while pulling the image to scan.                                                                                                                                                                                                                                                    |                           |
 | `registry-password`          | Registry password to authenticate to while pulling the image to scan.                                                                                                                                                                                                                                                    |                           |
 | `stop-on-failed-policy-eval` | Fail the job if the Policy Evaluation is Failed.                                                                                                                                                                                                                                                                         |                           |
@@ -64,7 +64,7 @@ You need to assign an ID to the Sysdig Scan Action step, like:
 
     - name: Scan image
       id: scan
-      uses: sysdiglabs/scan-action@v5
+      uses: sysdiglabs/scan-action@v6
       with:
         ...
 ```
@@ -95,8 +95,7 @@ The `if: success() || failure()` option makes sure the SARIF report is uploaded
 
     - name: Scan image
       id: scan
-      uses: sysdiglabs/scan-action@v5
-      with:
+      uses: sysdiglabs/scan-action@v6
           image-tag: sysdiglabs/dummy-vuln-app:latest
           sysdig-secure-token: ${{ secrets.SYSDIG_SECURE_TOKEN }}
 
@@ -114,7 +113,7 @@ The `if: success() || failure()` option makes sure the SARIF report is uploaded
     ...
 
     - name: Scan image
-      uses: sysdiglabs/scan-action@v5
+      uses: sysdiglabs/scan-action@v6
       with:
         image-tag: "sysdiglabs/dummy-vuln-app:latest"
         sysdig-secure-token: ${{ secrets.SYSDIG_SECURE_TOKEN }}
@@ -126,10 +125,10 @@ The `if: success() || failure()` option makes sure the SARIF report is uploaded
     ...
 
     - name: Scan infrastructure
-      uses: sysdiglabs/scan-action@v5
+      uses: sysdiglabs/scan-action@v6
       with:
         sysdig-secure-token: ${{ secrets.SYSDIG_SECURE_TOKEN }}
-        cli-scanner-version: 1.9.0
+        cli-scanner-version: 1.22.3
         mode: iac
         iac-scan-path: ./terraform
 ```

action.yml

@@ -5,8 +5,8 @@ inputs:
     description: URL to sysdig-cli-scanner binary download
     required: false
   cli-scanner-version:
-    description: Custom sysdig-cli-scanner version to download
-    default: "1.22.1"
+    description: Custom sysdig-cli-scanner version to download. Oldest supported version is 1.18.0.
+    default: "1.22.3"
     required: false
   registry-user:
     description: Registry username.