bearer/Bearer Action

Bearer is a free and open SAST tool that analyzes your source code to help find and fix security and privacy risks.

Trust Signals

workflow.ymlSHA-pinned

uses: bearer/bearer-action@828eeb928ce2f4a7ca5ed57fb8b59508cb8c79bc # v2

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
version	Specify the Bearer version to use. This must match a Bearer release name.	no	""
scanner	Specify the comma separated scanners e.g. --scanner secrets,sast	no	""
config-file	configuration file path	no	""
bearer-ignore-file	bearer.ignore file path	no	""
only-rule	Specify the comma-separated ids of the rules you would like to run. Skips all other rules.	no	""
skip-rule	Specify the comma-separated ids of the rules you would like to skip. Runs all other rules.	no	""
skip-path	Specify the comma separated files and directories to skip. Supports * syntax, e.g. --skip-path users/*.go,users/admin.sql	no	""
exclude-fingerprint	Specify the comma-separated fingerprints of the findings you would like to exclude from the report.	no	""
severity	Specify which severities are included in the report as a comma separated string	no	""
format	Specify which format to use for the report (json, yaml, sarif, gitlab-sast)	no	""
output	Specify where to store the report	no	""
api-key	For use with Bearer Cloud	no	""
diff	Enable differential scanning. Only supported for pull request events	no	false
quiet	Suppress non-essential messages	no	""
hide-progress-bar	Hide progress bar from output	no	true
exit-code	Forces the exit-code when errors are reported	no	""
path	The path to scan	no	.

name	description
rule_breaches	Details of any rule breaches that occur
exit_code	exit code from binary