| endpoint | Steampunk Spotter API endpoint (instead of default https://api.spotter.steampunk.si/api). | no | — |
| api_token | Steampunk Spotter API token. | no | — |
| username | Steampunk Spotter username. | no | — |
| password | Steampunk Spotter password. | no | — |
| timeout | Steampunk Spotter API timeout (in seconds). | no | — |
| config | Path to JSON/YAML configuration file. | no | — |
| paths | List of paths to Ansible content files to be scanned. If not specified, the whole repository is scanned. | no | . |
| project_id | ID of an existing target project in the app, where the scan result will be stored. If not specified, the first project of the user's first organization (in the app) will be used. | no | — |
| exclude_values | Omits parsing and uploading values from Ansible playbooks. | no | false |
| exclude_metadata | Omits collecting and uploading metadata (i.e., file names, line and column numbers). | no | false |
| display_level | Displays check results with specified level or greater (e.g., warning will show all warnings and errors, but suppress hints). Available options: hint, warning, error. | no | hint |
| no_docs_url | Omits documentation URLs from the output. | no | false |
| no_scan_url | Omits scan URL from the output. | no | true |
| ansible_version | Ansible version to use for scanning. If not specified, all Ansible versions are considered for scanning. | no | — |
| profile | Sets profile with selected set of checks to be used for scanning. | no | default |
| skip_checks | Skips checks with specified IDs. | no | — |
| enforce_checks | Enforce checks with specified IDs. | no | — |
| custom_policies_path | Path to the file or folder with custom OPA policies written in Rego Language (enterprise feature). | no | — |
| custom_policies_clear | Clears OPA policies for custom Spotter checks after scanning (enterprise feature). | no | false |
| debug | Enable debug output. | no | — |
| sarif_file | Sets the name of the SARIF file and triggers the creation of the SARIF report. | no | — |