| permissive_mode | Enables or disables the interruption of the action in the case of finding errors in the execution of the checks. | no | true |
| code_enable | Enables code check | no | true |
| sonar_source | SonarQube source. Required to run SonarQube. SonarQube also needs sonar-project.properties file. | no | . |
| sonar_host | SonarQube host. Required to run SonarQube. SonarQube also needs sonar-project.properties file. | no | SONAR_HOST |
| sonar_login | SonarQube login key. Required to run SonarQube.SonarQube also needs sonar-project.properties file. | no | SONAR_LOGIN |
| sonar_report_path | Location of the scanner metadata report file. Required to run Quality Gate. | no | .scannerwork/report-task.txt |
| config_enable | Enables configuration check. | no | true |
| secrets_enable | Enables secrets check | no | true |
| reviewdog_github_token | GitHub token. Required if config checker or secrets checker are enabled. | no | — |
| depcheck_project | Dependency check project. Required if code checker is enabled. | no | MY_PROJECT |
| depcheck_path | Dependency check path. Required if code checker is enabled. | no | . |
| depcheck_format | Dependency check format. Required if code checker is enabled. | no | HTML |
| trivy_repo_ignore-unfixed | Ignore unfixed vulnerabilities. Required if config checker is enabled. | no | false |
| trivy_repo_vuln | comma-separated list of vulnerability types (os,library). Required if config checker is enabled. | no | os,library |
| trivy_severity | Severities of vulnerabilities to be displayed. Required if config checker is enabled. | no | UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL |
| trivy_timeout | Trivy timeout duration. Required if config checker is enabled. | no | 5m |
| dockerlint_enable | Enables Docker lint check | no | false |
| dockerlint_level | Exit with failure code only when rules with a severity equal to or above THRESHOLD are violated. Accepted values: error, warning, info, style, ignore & none | no | error |