celfons/Quality & Security Scanner
Auto-detects project language and suggests quality/security workflows. Enables discovery of reusable workflows or actions.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| mode | Scanning mode: "quality" for quality checks, "security" for security scans, "all" for both | no | all |
| github-token | GitHub token for API access | yes | — |
| language | Override language detection (auto, nodejs, python, java) | no | auto |
| working-directory | Working directory for commands | no | . |
| skip-lint | Skip linting step | no | false |
| skip-format | Skip format check step | no | false |
| skip-test | Skip test step | no | false |
| skip-build | Skip build step | no | false |
| coverage-threshold | Minimum code coverage threshold (%) | no | 80 |
| skip-codeql | Skip CodeQL analysis | no | false |
| skip-secrets | Skip secret scanning | no | false |
| skip-iac | Skip IaC scanning | no | false |
| dockerfile-path | Path to Dockerfile | no | ./Dockerfile |
Outputs
| name | description |
|---|---|
| detected-language | Primary detected language |
| quality-passed | Whether quality checks passed |
| security-completed | Whether security scans completed |