advanced-security/GitHub Security Report Action
Generates security reports for a GitHub repository
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub Access Token with permissions for securoty events access on the repository. | — | ${{ github.token }} |
| outputDir | The output directory for the generated report(s). | yes | ${{ github.workspace }} |
| repository | Repository name with owner. For example, peter-murray/github-security-report | yes | ${{ github.repository }} |
| sarif_report_id | The latest SARIF report id to use for the analysis of the code scanning results, if not specified the latest report will be used for the target ref. | no | — |
| ref | The ref for the target to get the code scanning findings for | yes | ${{ github.ref }} |
| sha | The SHA of the HEAD of the ref for the scanning results | yes | ${{ github.sha }} |
| report_template | The template to use for the report being generated | no | summary |
| include_code_scanning | Include code scanning data in the report | no | true |
| include_secret_scanning | Include secret scanning data in the report | no | true |
| include_software_composition_analysis | Include software compositiona analysis data in the report | no | true |
Outputs
no outputs