dev-ugurkontel/surface-audit

Run deterministic web security smoke tests against a known URL.

Trust Signals

name	description	required	default
target	Target URL to scan.	yes	—
python-version	Python version used to install and run surface-audit.	no	3.12
package-spec	Optional pip install spec, for example `surface-audit==<exact-version>`. When omitted, the action installs the checked-out action source so the action ref and tool version stay aligned.	no	""
output	Optional output file path. When set, `format` is also used.	no	""
format	Output format used with `output`.	no	sarif
fail-on	Optional severity threshold such as HIGH or CRITICAL.	no	""
baseline	Optional baseline JSON report path for regression-only gating.	no	""
scope-hosts	Optional comma-separated hostname allow-list.	no	""
extra-args	Optional additional CLI arguments, one argument per line.	no	""

no outputs