42crunch/42Crunch API Conformance Scan

42Crunch API Scan action adds dynamic security testing to your APIs. This action includes report validation and SARIF support.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Mar 5, 2024
License
AGPL 3.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: 42crunch/cicd-github-actions@e2c9a02bb391932aee6ef994de06ff2c7aae9ff6 # v1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
api-tokenAPI token to access 42Crunch Platform. Check https://docs.42crunch.com/latest/content/tasks/integrate_github_actions.htm for detailsyes
platform-url42Crunch platform URLnohttps://platform.42crunch.com
audit-report-pathPath to JSON report from audit stepyes
api-idsList of API UUIDs to useno
convert-to-sarifPath to save sarif report, add 'Convert to sarif' stageno
upload-sarifAdd 'Upload sarif' and 'Convert to sarif' stageno
check-sqgAdd 'Check sqg' stageno
github-tokenGitHub token for uploading results to Github Code Scanningno${{ github.token }}

no outputs