aquasecurity/Chain Bench action

Run software supply chain benchmark

View on GitHub

Trust Signals

Scorecard Score
Scorecard 2–4scored Mar 16, 2026
Maintenance Recency
Stalelast commit Nov 24, 2022
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: aquasecurity/chain-bench-action@cd35ac2e4470006fc9bbbbcd6c328edb61b72332 # v1.1.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
repository-urlThe github repository url with the serveryes
github-tokenGithub Token that will be used to access the repositoryyes
scm-platformthe SCM platform for self-hosted/dedicated environments (options: 'github', 'gitlab')no
namedescription
chain-bench-resultJSON output from chain-bench run