cloudbees-io/snyk-sast-plugin
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- MIT
Pinned Snippet
uses: cloudbees-io/snyk-sast-plugin@a29877f45ded94f955beffcabd579730c59a397e # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| snyk-token | Snyk API token for authentication | yes | — |
| org-id | Snyk organization ID | yes | — |
| ref | Flag to indicate the ref that should be archived (same as supplied to checkout) | no | "" |
| workspace-dir | Flag to mention the path where the checked out code will be present | no | "" |
Outputs
| name | description |
|---|---|
| critical-count | A string containing the number of Critical security findings discovered during the scan. |
| very-high-count | A string containing the number of Very High security findings discovered during the scan. |
| high-count | A string containing the number of High security findings discovered during the scan. |
| medium-count | A string containing the number of Medium security findings discovered during the scan. |
| low-count | A string containing the number of Low security findings discovered during the scan. |
| policy-subject | A json value containing the details about the vulnerability scan summary & details. |