contrast-security-oss/Contrast Local Scan
Runs Contrast local scanner against the current repository
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| apiUrl | Url of your contrast instance, defaults to https://app.contrastsecurity.com/ | yes | https://app.contrastsecurity.com/ |
| apiUserName | User name for authentication | yes | — |
| apiKey | API Key from user settings | yes | — |
| apiServiceKey | Service Key from user settings | yes | — |
| apiOrgId | Organization ID from user settings | yes | — |
| checks | If set, checks will be added to the current commit based on any vulnerabilities found. Requires the 'checks: write' permission. | no | false |
| codeQuality | Set this to true to include code quality rules when executing source code scanner. | no | false |
| defaultBranch | Set this to true or false explicitly override the default branching behviour in scan whereby scan results not on the default github branch are not saved against the main project. | no | — |
| label | Label to associate with the current scan. Defaults to the current ref e.g. refs/heads/main | — | — |
| memory | Memory setting passed to the underlying scan engine. Defaulted to 8g | no | — |
| new | Set this to true or false to only fail the action on new vulnerabilities. This defaults to true when on a non default branch. | no | — |
| path | Path to scan with local scanner. Defaults to the current repository path. | no | — |
| projectName | Project to associate scan with. Defaults to current github repository name e.g. Example-ORG/example-repo | no | — |
| resourceGroup | Resource group to assign newly created projects to. | no | — |
| strategy | Used in conjuction with severity or checks, set this valid to fail the build based on agreggated project vulnerabilities or scan level. Valid values are "project" or "scan". Defaults to "project". | no | project |
| severity | Set this to cause the build to fail if vulnerabilities are found exceeding this severity or higher. Valid values are CRITICAL, HIGH, MEDIUM, LOW, NOTE. | no | — |
| timeout | Execution timeout (in seconds) setting passed to the underlying scan engine. Defaulted to 60 minutes. | no | — |
| token | GitHub token for GitHub API requests. Defaults to GITHUB_TOKEN. | yes | ${{ github.token }} |
Outputs
no outputs