actions-marketplace-validations/Contrast Verify
Verify Contrast Application by Job Outcome Policy or Vulnerability Count
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Jan 23, 2026
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/contrast-security-oss_integration-verify-github-action@1105689bc1ba04efc2edc650c57f8166a80c2984 # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| apiKey | Contrast User/Service Account API Key | yes | — |
| orgId | Contrast Organization ID | yes | — |
| apiUrl | URL of your Contrast Teamserver Instance (should begin with https:// or http://) | — | https://app.contrastsecurity.com |
| serviceKey | Contrast User/Service Account service key. Required if authorization not passed. | — | — |
| authHeader | Contrast User/Service Account Authorization Header. Required if username and service key not passed. | — | — |
| userName | Contrast User/Service Account username. Required if authorization not passed. | — | — |
| appId | ID of the application to verify against. Required if app_name not passed. | — | — |
| appName | Name of the application to verify against. Required if app_id not passed. | — | — |
| buildNumber | Build number / application version to check vulnerabilities against. | — | — |
| failThreshold | Number of vulnerabilities that are needed to fail the build (not used if there is a defined job outcome policy) | — | 0 |
| jobStartTime | Filter vulnerabilities first found after this timestamp (formatted in milliseconds since the epoch) | — | 0 |
| severities | Comma separated list of vulnerability severities to consider (not used if there is a defined job outcome policy) | — | CRITICAL,HIGH |
Outputs
no outputs