actions-marketplace-validations/CVE Lite CLI
Run CVE Lite CLI in GitHub Actions for JS/TS dependency vulnerability scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 19, 2026
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/sonukapoor_cve-lite-cli@5485b81fff9de79ed785a473ffba6e0cc9d4825b # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| node-version | Node.js version used to install and run CVE Lite CLI | no | 20 |
| path | Project path to scan | no | . |
| fail-on | Exit non-zero at or above this severity | no | "" |
| verbose | Run the scan with verbose output | no | false |
| prod-only | Exclude dev dependencies where available | no | false |
| offline | Run the scan using the local advisory database | no | false |
| offline-db | Path to the local advisory database file | no | "" |
| sync-advisories | Build or refresh the local advisory database before scanning | no | false |
Outputs
no outputs