eurekadevsecops/GitHub Action for Radar CLI
Scan your code for vulnerabilities with Radar CLI — the easiest way to run multiple scanners for complete AppSec coverage.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jan 29, 2026
- License
- GPL 3.0
Pinned Snippet
uses: eurekadevsecops/scan-action@ddf5dd8ae548443a6bd1e6c94eba9ad24fd1113f # v2.0.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| folder_to_scan | Provide a custom scan root directory. Defaults to the root of your GitHub repository. | no | ${{ github.workspace }} |
| scanners | Comma-separated list of scanners to use. Example: 'opengrep,gitleaks,grype,depscan'. Defaults to 'all' if not given. | no | all |
| export_findings_to_ghas | Upload findings to Github Advanced Security. This requires your repository to have GitHub Code Scanning enabled. | no | false |
| token | Optional Eureka ASPM auth token, used to upload findings to the Eureka ASPM platform. Can be left out if you don't want to upload findings to Eureka ASPM. | no | "" |
Outputs
| name | description |
|---|---|
| report | Report with consolidated findings from all scanners run by Radar CLI. Report is in SARIF format. |