ajinabraham/nodejsscan

njsscan finds insecure code patterns in your node.js applications.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Nov 11, 2024
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: ajinabraham/njsscan-action@231750a435d85095d33be7d192d52ec650625146 # v9

tags can be moved; commit SHAs can't. why a SHA?

Inputs

namedescriptionrequireddefault
argspositional arguments: path Path can be file(s) or directories with source code optional arguments: -h, --help show this help message and exit --json set output format as JSON --sarif set output format as SARIF 2.1.0 --sonarqube set output format compatible with SonarQube -o OUTPUT, --output OUTPUT output filename to save the result --missing-controls enable missing security controls check -w, --exit-warning non zero exit code on warning -v, --version show njsscan version yes—

Outputs

no outputs