advanced-security/CodeQL IaC Extractor

CodeQL IaC Extractor GitHub Action

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 1, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: advanced-security/codeql-extractor-iac@e389dc1ae37bf1ec88e317f69d2ddcdf057efdcd # v0.5.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
tokenThe GitHub token used to make authenticated API requests. no${{ github.token }}
rewrite-sarif-tool-nameWhether to rewrite the SARIF tool name to "CodeQL IaC" or keep the original tool name. notrue
namedescription
sarif-resultsThe path to the SARIF results file generated by the extractor.