dcondrey/Unicode Safety Check
Detect adversarial Unicode in PRs: bidi attacks, invisible chars, homoglyphs, confusable collisions, and more.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scan-mode | "changed" (PR/push diff only) or "all" (entire repo). | no | changed |
| policy-file | Path to a policy file (.yml, .yaml, .json). Omit for strict defaults. | no | "" |
| exclude-patterns | Newline-separated path patterns to exclude from scanning. | no | "" |
| fail-on-warn | Treat medium/low severity findings as errors. | no | false |
| disable-annotations | Skip inline PR annotations. | no | false |
| sarif-file | Path to write SARIF output for Code Scanning. | no | "" |
| version | Version of the unicode-safety-check binary to download. | no | 3.0.0 |
Outputs
| name | description |
|---|---|
| findings | Total number of findings. |
| files-scanned | Number of files scanned. |
| critical | Number of critical findings. |
| high | Number of high findings. |
| sarif-file | Path to SARIF file (if generated). |