| version | version of gosec to use | no | latest |
| output_path | output file path | no | gosec.sarif |
| package | package to scan | no | ./... |
| config_path | path to config file | no | — |
| confidence | filter out the issues with a lower confidence than the given value. Valid options are: low, medium, high | no | low |
| exclude | comma-separated list of rules IDs to exclude. (see rule list) | no | — |
| include | comma-separated list of rules IDs to include. (see rule list) | no | — |
| exclude_generated | exclude generated files | no | true |
| format | set output format. Valid options are: json, yaml, csv, junit-xml, html, sonarqube, golint, sarif or text | no | sarif |
| fail_on_error | fail the scanning if issues are found | no | false |
| include_tests | scan tests files | no | false |
| severity | filter out the issues with a lower severity than the given value. Valid options are: low, medium, high | no | low |
| tags | comma-separated list of build tags | no | — |
| exclude_path | exclude folder from scan (can be specified multiple times) | no | — |