dpnkrpl/flawfinder-action

Find potential vulnerabilities in your C/C++ codes

Trust Signals

name	description	required	default
github_token	GITHUB_TOKEN secret < automatically provided by Github , you don't need to set up >	yes	—
report_type	Report type: text \| HTML	no	html
data_only	Don't display the headers and footers of the analysis.	no	disable
never_ignore	Never ignore security issues, even if they have an ``ignore'' directive in a comment.	no	disable
false_positive	Do not include hits that are likely to be false positives. <see flawfinder documentations>	no	disable
inputs_flag	Show only functions that obtain data from outside the program. this also sets minlevel to 0.	no	disable
dot_directories	Scan for files even in directories whose names begin with . (dot)	no	disable
allow_link	Allow symbolic links.	no	disable
target_branch	Branch that the badge will target. Defaults to the current branch.	no	""
pull_request_branch	Branch that the action will target on pull_request. Defaults to GITHUB_BASE_REF.	no	""
target_repository	Repository that the report will be pushed on. Defaults to the current repository.	no	""
pull_request_repository	Repository that the action will target on pull_request. Defaults to TARGET_REPOSITORY	no	""

no outputs