cloudon-one/Git Security Scanner
Security scanning for GitHub repos using Gitleaks and Trivy to detect secrets, vulnerabilities, and misconfigurations
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GitHub token for API access | no | ${{ github.token }} |
| fail_on_critical | Fail the build if critical security issues are found | no | true |
| scan_type | Type of scan to perform (all, gitleaks, trivy) | no | all |
| repository_path | Path to the repository to scan | no | . |
| upload_sarif | Upload SARIF results to GitHub Security tab | no | true |
| create_pr_comment | Create a comment on pull requests with scan results | no | true |
| scanner_version | Version of the scanner image to use | no | main |
Outputs
| name | description |
|---|---|
| risk_level | Overall risk level (CRITICAL, HIGH, MEDIUM, LOW, INFO) |
| critical_count | Number of critical security issues found |
| high_count | Number of high severity issues found |
| medium_count | Number of medium severity issues found |
| low_count | Number of low severity issues found |
| secrets_found | Number of secrets detected |
| vulnerabilities_found | Number of vulnerabilities detected |
| misconfigurations_found | Number of misconfigurations detected |
| report_url | URL to the detailed security report |