achyuta0001/tripwyre
Scan dependencies, config drift, and logs; optionally comment findings on the pull request and fail the build on severe findings.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 11, 2026
- License
- None
Pinned Snippet
uses: achyuta0001/tripwyre@4eb1c40b1ef78faedf04b5b49ae947ad9049d7a1 # no releases — HEAD as of 2026-07-16tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| fail-on | Fail the build if findings at this severity or above exist (critical|warning|info). Empty disables gating. | — | critical |
| config | Path to tripwyre.toml, relative to the workspace. | — | tripwyre.toml |
| comment | Post (or update) a findings comment on the pull request. | — | true |
| github-token | Token used to post the PR comment. | — | ${{ github.token }} |
Outputs
no outputs