apisec-inc/APIsec Scan
Continuous, automated, comprehensive API Security Testing
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit May 16, 2024
- License
- None
Pinned Snippet
uses: apisec-inc/apisec-run-scan@8f66ce948afb779712a1d57ecb0a528d7ded5a45 # v1.0.7tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| apisec-username | The APIsec username with which the scans will be executed | yes | "" |
| apisec-password | The Password of the APIsec user with which the scans will be executed | yes | "" |
| apisec-project | The Name of the project for security scan | yes | "" |
| apisec-profile | The Name of the scan profile to be executed | no | Master |
| apisec-region | The location the scan will be executed in | no | "" |
| sarif-result-file | The path to the sarif format result file | no | "" |
| apisec-email-report | To trigger scan email reports, set this value as "true" or else "false" | no | "" |
| apisec-fail-on-vuln-severity | Pass the severity string for which pipeline execution breaks upon finding that severity vulnerability. Possible string values are Critical, High and Medium severity. By default its an empty string "". | no | "" |
| apisec-openapi-spec-url | OpenAPI Spec Url for registering a project | no | "" |
| apisec-refresh-playbooks | To regenerate/refresh the playbooks of a project, set this value as "true" or else "false" | no | "" |
Outputs
no outputs