g-cqd/SwiftStaticAnalysis (swa)

Run swa on a Swift codebase to find unused code and duplicates, with SARIF output.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit May 17, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: g-cqd/swiftstaticanalysis@7d529660c192dc331187468ae7ac79aa8d0e63c5 # v0.1.2

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
pathPath to scan (directory or file).no.
modeUnused-code detection mode (reachability, simple, indexStore).noreachability
clone-typesComma-separated clone types to detect (exact, near, semantic).noexact,near
min-tokensMinimum tokens for a duplicate clone group.no50
formatOutput format (sarif, text, json, xcode). `sarif` is post-processed from JSON.nosarif
fail-onSeverity threshold to fail the step (error, warning, never). Implemented in-action; swa itself has no fail-on flag.noerror
swa-versionOptional git ref to check out before building (tag, branch, or SHA). When empty, uses the workspace as-is.no""
working-directoryWorking directory in which to invoke swa.no${{ github.workspace }}
namedescription
unused-countNumber of unused-code findings reported by swa.
duplicates-countNumber of duplicate clone groups reported by swa.
sarif-pathPath to the generated SARIF file (only when format=sarif).