actions-marketplace-validations/cppcheck-action-jackson

Find potential vulnerabilities in your C/C++ codes

Trust Signals

workflow.ymlSHA-pinned

uses: actions-marketplace-validations/chmorgan_cppcheck-action@88696b3fd4a3ced3df76a2f7dc44b251d8232bcb # no releases — HEAD as of 2026-07-13

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
github_token	GITHUB_TOKEN secret < automatically provided by Github , you don't need to set up >	yes	—
check_library	Show information messages when library files have info.	no	disable
skip_preprocessor	Print preprocessor output on stdout and don't do any further processing.	no	disable
enable	Enable additional checks	no	all
exclude_check	Give a source file or source file directory to exclude from the check	no	disable
inconclusive	Allow that Cppcheck reports even though the analysis is inconclusive.	no	enable
inline_suppression	Enable inline suppressions	no	disable
force_language	Forces cppcheck to check all files as the given language	no	disable
force	Force checking of all configurations in files	no	disable
max_ctu_depth	Max depth in whole program analysis	no	disable
platform	Specifies platform specific types and sizes	no	disable
std	Set the C/C++ standard	no	c++20
output_file	file where the result to be dumped	no	""
target_branch	Branch that the badge will target. Defaults to the current branch.	no	""
other_options	Any other options you want to add, separate with a space, wrong options will cause a failure	no	disable
pull_request_branch	Branch that the action will target on pull_request. Defaults to GITHUB_BASE_REF.	no	""
target_repository	Repository that the report will be pushed on. Defaults to the current repository.	no	""
pull_request_repository	Repository that the action will target on pull_request. Defaults to TARGET_REPOSITORY	no	""

no outputs