asttr0/AuthzTrace
Authorization contract testing for IDOR/BOLA in CI
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| config | Path to authztrace.yaml | no | authztrace.yaml |
| base-url | Override base_url from the contract | no | "" |
| sarif | SARIF output path | no | authztrace.sarif |
| json | JSON output path | no | "" |
| junit | JUnit XML output path | no | "" |
| strict | Return non-zero when warnings occur | no | false |
| include-unsafe | Execute non-read-only endpoints such as POST, PUT, PATCH, and DELETE | no | false |
| python-version | Python version used to install and run AuthzTrace | no | 3.12 |
Outputs
no outputs