contrast-security-oss/Contrast Scan Analyze
Perform SAST analysis of a project
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| apiKey | An agent API key provided by Contrast (required). | yes | — |
| authHeader | User authorization credentials provided by Contrast (required). | yes | — |
| orgId | The ID of your organization in Contrast (required). | yes | — |
| artifact | The Artifact to Scan on the Contrast Platform. | yes | — |
| apiUrl | The name of the host. Includes the protocol section of the URL (https://). Defaults to https://ce.contrastsecurity.com. (optional) | no | https://ce.contrastsecurity.com |
| projectName | The name of the project you want to scan in Contrast. | no | — |
| projectId | The ID of your project in Contrast. | no | — |
| language | The language of your project. | no | — |
| timeout | Set a specific time span (in seconds) before the function times out. The default timeout is 10 minutes if timeout is not set. | no | 600 |
| severity | Allows user to report vulnerabilities above a chosen severity level. Values for level are high, medium or low. (Note: Use this input in combination with the fail input, otherwise the action will exit) | no | — |
| fail | When set to true, fails the action if CVEs have been detected that match at least the severity option specified. | no | — |
Outputs
no outputs