cozygarage/SentinelFlow Security Scan
Run SentinelFlow security scanning in your CI/CD pipeline
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scan-all | Enable all scanners (secrets, iac, deps, sast, license) | no | true |
| scan-secrets | Enable secret scanning | no | true |
| scan-iac | Enable Infrastructure-as-Code scanning | no | true |
| scan-deps | Enable dependency vulnerability scanning | no | true |
| scan-sast | Enable SAST scanning (OWASP patterns) | no | true |
| scan-license | Enable license policy scanning | no | true |
| scan-container | Enable container image scanning (requires Trivy) | no | false |
| container-image | Container image reference to scan | no | "" |
| use-baseline | Apply baseline filtering (.sentinelflow.baseline.json) | no | false |
| fail-on | Fail on findings at or above this severity (critical, high, medium, low) | no | high |
| format | Report output format (text, json, sarif, markdown, html) | no | sarif |
| output | Output file path for the report | no | report.sarif |
| working-directory | Directory to scan | no | . |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings (from scan summary) |
| exit-code | Exit code from the scan step |