austenstone/GitHub Security Alert Export
Exports GitHub code scanning, secret scanning, and dependabot security alerts to JSON
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | The GitHub token used to create an authenticated client | no | ${{ github.token }} |
| enterprise | The GitHub Enterprise | no | — |
| organization | The GitHub organization | no | — |
| repository | The GitHub repository | no | ${{ github.repository }} |
| code-scanning | Whether to export code scanning alerts | no | true |
| code-scanning-query-parameters | query parameters as JSON Ex: {"state": dismissed} https://docs.github.com/en/rest/code-scanning/code-scanning?apiVersion=2022-11-28#list-code-scanning-alerts-for-a-repository | no | — |
| secret-scanning | Whether to export secret scanning alerts | no | true |
| secret-scanning-query-parameters | query parameters as JSON https://docs.github.com/en/rest/secret-scanning/secret-scanning?apiVersion=2022-11-28#list-secret-scanning-alerts-for-a-repository | no | — |
| dependabot | Whether to export dependabot alerts | no | true |
| dependabot-query-parameters | query parameters as JSON Ex: {"state": dismissed} https://docs.github.com/en/rest/dependabot/alerts?apiVersion=2022-11-28#list-dependabot-alerts-for-a-repository | no | — |
| create-artifact | Whether to create an artifact with the alerts | no | true |
| artifact-name | The name of the artifact | no | GitHub Security Alerts |
Outputs
| name | description |
|---|---|
| dependabot | Dependabot alerts as a JSON string |
| code-scanning | Code scanning alerts as a JSON string |
| secret-scanning | Secret scanning alerts as a JSON string |
| artifact-name | The name of the artifact created |