fix: expose result-path output for scan-image-vulnerabilities

release/scan-image-vulnerabilities/README.md

@@ -59,6 +59,12 @@ URL of the ACS/RHACS Central instance to use for scanning.
 
 Example: `"https://central.example.com"`
 
+## Outputs
+
+| Output         | Description                                                          |
+|----------------|----------------------------------------------------------------------|
+| `result-path`  | Path to the scan image result JSON for further inspection or upload. |
+
 ## Usage
 
 The action integrates with the [stackrox/central-login](https://github.com/stackrox/central-login) action, which uses OIDC login for authentication of the `roxctl` CLI.

release/scan-image-vulnerabilities/action.yml

@@ -22,6 +22,11 @@ inputs:
     description: "ACS Central URL"
     required: true
 
+outputs:
+  result-path:
+    description: "Path to a JSON file with the scan results"
+    value: ${{ steps.scan-image-vulnerabilities.outputs.result-path }}
+
 runs:
   using: composite
   steps:
@@ -44,6 +49,7 @@ runs:
         central-token: ${{ env.ROX_API_TOKEN }}
 
     - name: Scan image for fixable vulnerabilities
+      id: scan-image-vulnerabilities
       shell: bash
       run: |
         set -uo pipefail