fannar-afk/ShadowGuard

Run ShadowGuard dependency risk scan in GitHub Actions.

Trust Signals

name	description	required	default
path	Project directory to scan.	no	.
plugins	Plugin rule directory.	no	plugins
output	Output report path.	no	shadowguard-report.json
format	Output format. Supported values include report, sbom, validation, vuln, and sarif.	no	report
validate-sbom	Whether to validate the generated CycloneDX SBOM.	no	false
fail-on-invalid-sbom	Return a non-zero exit code when SBOM validation fails.	no	false
fail-on-block	Return a non-zero exit code when the security gate outcome is Block.	no	false
fail-on-warn	Return a non-zero exit code when the security gate outcome is Warn or Block.	no	false
vuln	Whether to query vulnerability data.	no	false
vuln-provider	Vulnerability provider name.	no	osv
fail-on-vulnerability	Return a non-zero exit code when vulnerabilities are found.	no	false

no outputs