duriantaco/Skylos - Python SAST, Dead Code Detection & PR Gate
SAST, dead code detection, secrets scanning, and PR gating for Python, TypeScript, Java, and Go.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (default: current directory) | no | . |
| mode | Scan mode: 'scan' (report only), 'gate' (fail on issues), 'review' (PR comments + gate) | no | gate |
| analysis | Analysis types to run (space-separated): dead-code security quality ai-defects secrets | no | dead-code security |
| confidence | Minimum confidence threshold (0-100) | no | 60 |
| token | Optional legacy Skylos API token for uploads. Prefer GitHub OIDC with id-token: write when running in GitHub Actions. | no | — |
| python-version | Python version to use | no | 3.11 |
| max-comments | Maximum inline PR review comments (default: 15) | no | 15 |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| gate-passed | Whether the quality gate passed (true/false) |
| report-path | Path to the JSON report file |