actions-marketplace-validations/ISCAN Github Action
Run ISCAN scan against IaC projects
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Jun 10, 2021
- License
- GPL 3.0
Pinned Snippet
uses: actions-marketplace-validations/sltestinfra_iscan-github-action@d3df3d1695ec23f080a4eb10af164ad3172aabcf # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | paths to a file or directories to scan, accepts a comma separated list | yes | — |
| ignore_on_exit | defines which non-zero exit codes should be ignored (all, results, errors, none) | no | — |
| fail_on | comma separated list of which severities returns exit code !=0 | no | — |
| timeout | number of seconds the query has to execute before being canceled | no | — |
| profiling | turns on profiler that prints resource consumption in the logs during the execution (CPU, MEM) | no | — |
| config_path | path to configuration file | no | — |
| platform_type | case insensitive list of platform types to scan | no | — |
| exclude_paths | exclude paths from scan, supports glob, quoted comma separated string example: './shouldNotScan/*,somefile.txt' | no | — |
| exclude_queries | exclude queries by providing the query ID | no | — |
| exclude_categories | exclude categories by providing its name, can be provided multiple times or as a comma separated string | no | — |
| exclude_results | exclude results by providing the similarity ID of a result | no | — |
| output_formats | formats in which the results report will be exported (json, sarif) | no | — |
| output_path | file path to store results report (json, sarif) | no | — |
| payload_path | file path to store source internal representation in JSON format | no | — |
| queries | path to directory with queries (default "./assets/queries") | no | — |
| verbose | verbose scan | — | — |
Outputs
| name | description |
|---|---|
| results | the result of ISCAN scan |