actions-marketplace-validations/SAST-action
GitHub Action examines C/C++ source code and reports possible security weaknesses (“flaws”) sorted by risk level.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Mar 24, 2021
- License
- Apache 2.0
Pinned Snippet
uses: actions-marketplace-validations/ivankuchin_sast@b52ccf485dd0f9e63d519e1f1fbdc3cf0a6f155e # no releases — HEAD as of 2026-07-14tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| GITHUB_TOKEN | GITHUB_TOKEN (automatically assinged by GitHub) | yes | — |
| DATAONLY | Don’t display the header and footer. | no | true |
| SOURCE_CODE | Source code folder or file to check. | no | ./ |
Outputs
no outputs