advanced-security/Secret Scanning Review Action
Increase the visibility of Secret Scanning alerts as part of pull request collaboration
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub Access Token that provides access to the repository. Must be provided via either parameter or environment variable. The github.token cannot be used as it does not provide secret scanning alert access. | no | — |
| fail-on-alert | A boolean to raise workflow/annotation error(instead of warning) if alert is detected. | no | false |
| fail-on-alert-exclude-closed | A boolean to exclude an alert from FailOnAlert if it is marked as closed (state: 'resolved'). | no | false |
| disable-pr-comment | A boolean to disable the PR comment feature. | no | false |
| runtime | The runtime to use for the action (`powershell` or `python`). | no | powershell |
| python-http-proxy-url | The URL of the http proxy to use for GitHub API requests (python runtime only). | no | "" |
| python-https-proxy-url | The URL of the https proxy to use for GitHub API requests (python runtime only). | no | "" |
| python-verify-ssl | A boolean to enable or disable SSL verification for GitHub API requests (python runtime only). NOTE: This is NOT recommended and may introduce additional security risks. | no | true |
| skip-closed-alerts | A boolean to enable or disable skipping closed alerts from evaluation. | no | false |
| python-skip-closed-alerts | [DEPRECATED - Use skip-closed-alerts instead] A boolean to enable or disable skipping closed alerts from evaluation (python runtime only). | no | false |
| disable-workflow-summary | A boolean to disable the workflow summary comment. | no | false |
| python-disable-workflow-summary | [DEPRECATED - Use disable-workflow-summary instead] A boolean to disable the workflow summary comment (python runtime only). | no | false |
Outputs
| name | description |
|---|---|
| alerts | Details about the alerts detected in the PR. |