bpsizemore/Nosey Parker

Scan repository for secrets

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Stalelast commit Mar 4, 2024
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: bpsizemore/noseyparker-action@12ee49ccd667c8ce63eb5a39e8198019a26eb221 # v1.0.0

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
local-output	echo human-readable findings to console	no	true
report-name	File name for the reports without the extension	no	report
report-format-human	upload human readable (txt) formatted report	no	false
report-format-json	upload json formatted report	no	false
report-format-jsonl	upload jsonl formatted report	no	false
report-format-sarif	upload sarif formatted report	no	false
scan-directory	relative directory of the repo to scan from $GITHUB_WORKSPACE	no	main
fail-on-finding	set to true to interrupt the pipeline if there are any findings	no	false
scan-args	Arguments to pass to scan - this is passed after datastore and scan-directory are specified. Arguments like --github-user will override the scan directory for local scanning.	no	""

Outputs

name	description
time	The initial runtime.
np_status_code	Status code of the noseyparker scan command.
np_status	Descriptive status of noseyparker scan command.