actions-marketplace-validations/CI Security Report

Compare security reports between PR and develop

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Apr 8, 2022
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: actions-marketplace-validations/dreamquark-ai_ci-security-report@384a8602d17cfdad8b744ee4ced73243236acf73 # no releases — HEAD as of 2026-07-10

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
imageImage to perform security scans onyes
base-tagTag of the base image used as referenceyeslatest
new-tagTag of the new image on which changes must be detectedyessecurity-test
orgaOrganization name to which the repo belongsyesdreamquark-ai
repoRepository on which the action is triggeredyes
pr-nbPR number on which to comment with the security reportyes
topicThe title of the report: used to identify the security reportyesimage
trivy-timeoutSet the time '<n>m' until when Trivy scan has to stop20m

no outputs