amarjaleelbanbhan/CortexWard Scan
Run CortexWard (bandit + detect-secrets + OSV.dev) against a repository and upload the results as a SARIF code-scanning report.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan, relative to the calling repository's checkout. | no | . |
| fail-on | Minimum severity that fails the action: none, low, medium, high, critical. | no | high |
| baseline | Path to a baseline file (see `ward baseline`) used to suppress known findings. Leave empty to scan without a baseline. | no | "" |
| language | Restrict scanning to this language (e.g. 'python'). Leave empty to scan all. | no | "" |
| upload-sarif | Whether to upload the SARIF report via github/codeql-action/upload-sarif. | no | true |
| cortexward-ref | Git ref of amarjaleelbanbhan/CortexWard to install `ward` from. | no | main |
Outputs
| name | description |
|---|---|
| sarif-path | Path to the generated SARIF file. |
| exit-code | ward scan's own exit code (0 clean, 1 if --fail-on's threshold was crossed). |