fluidattacks/Fluid Attacks SCA
Run software composition analysis with Fluid Attacks scanner
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scan_config_path | Path to the YAML configuration file, relative to the repository root. When not provided, the action runs with built-in defaults. The job fails if the file does not exist at the given path. | no | "" |
| scanner_mode | Scan mode. "full" (default) scans the entire repository on every run. "diff" scans only changed files versus the base branch or PR base — requires fetch-depth: 0 in the checkout step. | no | "" |
Outputs
| name | description |
|---|---|
| sarif_file | Path to SARIF results file (if SARIF format selected) |
| vulnerabilities_found | Whether vulnerabilities were found (true/false) |