eliblock/Less Advanced Security
Bring-your-own PR annotations to any tool which outputs sarif
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit May 29, 2024
- License
- MIT
- Runtime
- Deprecated runtime
Pinned Snippet
uses: eliblock/less-advanced-security-action@27a776186bf8937168cc74d92d1a0af5a1dee07f # v0.3.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| github_app_id | app id for GitHub application | yes | — |
| github_app_install_id | install id from GitHub application | yes | — |
| github_app_key | key from GitHub application. Will be placed in a temporary file and passed to less-advanced-security. | yes | — |
| sarif_path | path to sarif file containing annotations | yes | — |
| filter_annotations | "true" to apply annotations only when they coincide with a changed line, "false" apply all annotations | — | true |
| check_name | override of the default name for the check. When set, this string is used instead of the tool driver name found in the sarif. | — | "" |
Outputs
no outputs