baruchiro/2ms Action

Downloads and runs the Checkmarx/2ms tool on a cloned repository.

Trust Signals

name	description	required	default
repo-path	The path of the cloned repository.	no	.
config	Config file path.	no	—
exclude-rules	Exclude rules by name or tag to apply to the scan (removes from list, starts from all).	no	—
include-rules	Include rules by name or tag to apply to the scan (adds to list, starts from empty).	no	—
log-level	Log level (trace, debug, info, warn, error, fatal).	no	info
regexes	Custom regexes to apply to the scan, must be valid Go regex.	no	—
report-paths	Path to generate report files. The output format will be determined by the file extension (.json, .yaml, .sarif).	no	results.json
stdout-format	Stdout output format, available formats are: json, yaml, sarif.	no	yaml

no outputs