blackheaven/Scan code security advisories

Scan Haskell code for possible security advisories.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Apr 20, 2026
License: ISC

Pinned Snippet

workflow.ymlSHA-pinned

uses: blackheaven/haskell-security-action@85410a4abf6d62e8091f780b721296db8b3d245e # v1.0.0

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
checkout_path	The path at which the analyzed repository was checked out. Used to relativize any absolute paths in the uploaded SARIF file.	no	${{ github.workspace }}
ref	The ref where results will be uploaded. If not provided, the Action will use the GITHUB_REF environment variable. If provided, the sha input must be provided as well. This input is ignored for pull requests from forks.	no	—
sha	The sha of the HEAD of the ref where results will be uploaded. If not provided, the Action will use the GITHUB_SHA environment variable. If provided, the ref input must be provided as well. This input is ignored for pull requests from forks.	no	—
token	GitHub token to use for authenticating with this instance of GitHub. The token needs the `security-events: write` permission.	no	${{ github.token }}

Outputs

name	description
sarif-id	The ID of the uploaded SARIF file.