actions-marketplace-validations/CBAE action
Performs CBOM vulnerability analysis on a repository using CLI and provides a detailed compliance report.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Dec 6, 2025
- License
- None
Pinned Snippet
uses: actions-marketplace-validations/namokar100_cbae-action@762b76b3c7a2c7b2708da63ff455053e483abd82 # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub token with access to clone CBOM tool repo | yes | — |
| commands-to-install-build-tools | Optional shell commands to install custom build tools before analysis | no | — |
| build-command | Optional build command to compile the project before analysis | no | — |
Outputs
| name | description |
|---|---|
| cbom-report | Path to the generated CBOM JSON report |
| compliance-report | Path to the generated compliance text report |