cloudbees-io-gha/Snyk SCA scan and publish to Unify Platform

Runs Snyk SCA scan to detect security vulnerabilities in open source dependencies and publishes to the Unify platform.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Jan 19, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: cloudbees-io-gha/snyk-sca-publish@4c258fb66565e447636d45a495e1ef9462c78a4d # v1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
cloudbees-urlCloudbees API URLnohttps://api.cloudbees.io
snyk-tokenSnyk API token for authenticationyes
org-idSnyk organization IDyes
cli-paramsCommand line params for snyk open source scanno
build-directoryBuild directory that holds the build toolsno
refFlag to indicate the ref that should be archived (same as supplied to checkout).no""
workspace-dirFlag to mention the path where the checked out code will be present.no""
step-idThe ID of the step in the workflowno""
namedescription
critical-countA string containing the number of Critical security findings discovered during the scan.
very-high-countA string containing the number of Very High security findings discovered during the scan.
high-countA string containing the number of High security findings discovered during the scan.
medium-countA string containing the number of Medium security findings discovered during the scan.
low-countA string containing the number of Low security findings discovered during the scan.