cyberarmyid/Helium Security Vulnerability Scanner
Run Helium Security vulnerability scan in GitHub Actions
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| helium_base_url | Helium Base URL | no | — |
| api_key | Helium API Key | yes | — |
| workspace_id | Workspace ID | yes | — |
| tool | Scanner type (website-scanner, api-scanner) | yes | — |
| scan_option | Scanner option (basic_scan, full_scan) | yes | — |
| target | Target URL to scan | yes | — |
| fail_on | Fail build if severity >= value | no | high |
| target_path | (Optional) Path to the target file or directory for scanning (used for some tools). | no | — |
| api_definition_type | (Optional) API definition type. One of: openapi, swagger, postman, raml, wadl. Only for api-scanner. | no | — |
| api_definition_url | (Optional) URL or path to the API definition file (OpenAPI/Swagger/Postman/etc). Only for api-scanner. | no | — |
| login_url | (Optional) URL for authentication/login. Used for both website-scanner and api-scanner. | no | — |
| login_payload | (Optional) Payload for authentication/login. Can be string or JSON. Used for both website-scanner and api-scanner. | no | — |
| auth_method | (Optional) Authentication method for website-scanner. One of: cookie, form. | no | — |
| after_login_url | (Optional) URL to visit after login for website-scanner. | no | — |
| logout_url | (Optional) URL to logout for website-scanner. | no | — |
| login_success_indicator | (Optional) Indicator for successful login (string to check in response) for website-scanner. | no | — |
| cookies_input | (Optional) Cookies to use for authentication (if method is cookie) for website-scanner. | no | — |
| auth_token_location | (Optional) Location of auth token in response for api-scanner. | no | — |
| auth_header_name | (Optional) Header name for auth token for api-scanner. | no | — |
| auth_token_prefix | (Optional) Prefix for auth token in header for api-scanner. | no | — |
Outputs
no outputs