digidenone/SynapseAudit Security Scanner
AI-Powered Security Scanning for your Codebase and Infrastructure
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-key | SynapseAudit API Key (Optional for basic scans) | no | — |
| target | Target to scan (file path for static, URL/IP for cortex) | no | . |
| scan-type | Type of scan: static, web-scan, network-scan, cloud-scan, binary-scan, osint-scan, ai-scan, sca, secrets, iac, license | no | static |
| fail-on-critical | Fail the workflow if critical vulnerabilities are found | no | true |
| auto-fix | Automatically fix vulnerabilities and commit changes | no | false |
| config-url | URL to a remote .synapseaudit.json configuration file | no | — |
| delta-scan | Scan only changed files (requires fetch-depth: 0) | no | false |
| github-token | GitHub Token for PR comments and commits | no | ${{ github.token }} |
| baseline-file | Path to baseline file for suppressing known findings | no | .synapseaudit-baseline.json |
| slack-webhook | Slack Incoming Webhook URL for notifications | no | — |
| upload-sbom | Upload generated SBOM as a workflow artifact | no | false |
Outputs
| name | description |
|---|---|
| vulnerability-count | Total number of vulnerabilities found |
| critical-count | Number of critical severity vulnerabilities |
| high-count | Number of high severity vulnerabilities |
| scan-duration | Scan duration in seconds |
| sarif-file | Path to generated SARIF file (if vulnerabilities found) |
| scan-results | JSON string of full scan results |
| security-score | Security score (A-F grade) |
| sbom-file | Path to generated SBOM file |
| license-report | JSON string of license compliance results |