| triggering-event | The name of the event that triggered the workflow run. Supported values are (merge_group | pull_request | push | manual). | no | ${{ github.event_name }} |
| base | Hash of base commit. This input is used when triggering-event is set to "manual". | no | "" |
| head | Hash of head commit. This input is used when triggering-event is set to "manual". | no | "" |
| merge-group-base | Hash of the merge group's parent commit. This input is used when triggering-event is set to "merge_group". | no | ${{ github.event.merge_group.base_sha }} |
| merge-group-head | Hash of the merge group commit. This input is used when triggering-event is set to "merge_group". | no | ${{ github.event.merge_group.head_sha }} |
| pull-request-base | Hash of top commit on base branch. This input is used when triggering-event is set to "pull_request". | no | ${{ github.event.pull_request.base.sha }} |
| pull-request-head | Hash of latest commit in Pull Request. This input is used when triggering-event is set to "pull_request". | no | ${{ github.event.pull_request.head.sha }} |
| push-event-base | Hash of the last commit before push. This input is used when triggering-event is set to "push". | no | ${{ github.event.before }} |
| push-event-head | Hash of the last commit after push. This input is used when triggering-event is set to "push". | no | ${{ github.event.after }} |
| diff-scan | Input allowing to request specific type of scan. Input is taken into consideration only if `triggering-event` is set to `manual`. | no | true |
| strict-check-on-push | Differential ShellCheck performs full scans when running on a `push` event, but the Action fails only when new defects are added.
This option allows overwriting this behavior. Hence when `strict-check-on-push` is set to `true` it will fail when any defect is discovered.
| no | false |
| external-sources | Enable following of source statements even when the file is not specified as input. By default, shellcheck will only follow files specified on the command-line (plus /dev/null).
This option allows following any file the script may source. This option may also be enabled using external-sources=true in .shellcheckrc. This flag takes precedence.
| no | true |
| severity | Specify minimum severity of errors to consider. Valid values in order of severity are error, warning, info and style. The default is style. | no | style |
| scan-directory | Directory to scan. If not specified, the root directory is scanned. | no | "" |
| exclude-path | List of paths excluded from ShellCheck scanning. | no | "" |
| include-path | List of paths to files that will be scanned by ShellCheck. | no | "" |
| display-engine | Tool used to display the defects in the output. Valid values are csgrep and sarif-fmt. | no | csgrep |
| token | GitHub TOKEN used to upload SARIF data. | no | — |