actions-marketplace-validations/Rapid7 Application Security Scan
The Rapid7 Application Security Scan action allows application and security teams to embed DAST into build and release pipelines.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Dec 5, 2025
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/rapid7_insightappsec-scan-github-actions@b414d5e223fda83c68c321f2171da571724d8152 # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| region | The region indicates the geo-location of the Insight Platform | yes | us |
| api-key | The API key used to authorized the GitHub action to interact with the Rapid7 API. The API key should be stored as a GitHub secret | yes | — |
| scan-config-id | The UUID of the scan configuration to be used during scanning. The scan configuration should be a sub-resource of the application and can be obtained from Rapid7 Application Security | yes | — |
| vuln-query | Scan gating query | no | "" |
| wait-for-scan-complete | Wait for scan to complete before finishing action. False will return the Application Security Scan ID. | no | true |
| scan-timeout-mins | The maximum amount of time (in minutes) the scan is allowed to run before canceling and failing the job. | no | — |
Outputs
| name | description |
|---|---|
| scan-findings | A raw JSON report containing all findings from a completed scan. |