basel5001/DevSecOps Security Pipeline
Comprehensive security scanning with SAST, dependency scanning, container scanning, IaC scanning, secrets detection, and AI-powered analysis.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 11, 2026
- License
- MIT
Pinned Snippet
uses: basel5001/devsecops-pipeline@514c0c38265824e2e42b65445c333b56545e52d4 # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (defaults to repository root) | no | . |
| fail-on-critical | Fail the action if critical findings are detected | no | true |
| bedrock-enabled | Enable AWS Bedrock AI analysis | no | false |
| bedrock-model-id | AWS Bedrock model ID | no | anthropic.claude-3-haiku-20240307-v1:0 |
| severity-threshold | Minimum severity to report (CRITICAL, HIGH, MEDIUM, LOW) | no | MEDIUM |
| upload-artifact | Upload scan results as an artifact | no | true |
Outputs
| name | description |
|---|---|
| risk-score | Overall risk score (0-100) |
| report-path | Path to the generated HTML report |
| total-findings | Total number of findings |
| critical-count | Number of critical findings |