accuknox/Accuknox SAST: Opengrep

Run AccuKnox SAST scan on the repository; results are automatically uploaded to CSPM panel.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 10, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: accuknox/sast-scan-opengrep-action@e8eec5e0b21fe64895eb10ff7ff60912ecd4ec16 # v1.0.5

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
soft_failDo not fail the pipeline if scan finds issuesnotrue
pipeline_idPipeline/Job ID to correlate with CI/CD runsno${{ github.run_id }}
job_urlURL for the current GitHub jobno${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
accuknox_endpointCSPM panel endpoint URLyes
accuknox_tokenToken for authenticating with CSPM panelyes
accuknox_labelLabel in AccuKnox SaaS for scan resultsyes
severityComma-separated severities: MEDIUM, HIGH, CRITICALnoHIGH
accuknox_ai_analysisEnable AI analysisnofalse
anthropic_api_keyAnthropic API key for AI analysisno""

no outputs