gerrrt/opseclint detection-coverage
Analyze shell/command playbooks: map actions to ATT&CK techniques, host telemetry, and the detections that would fire.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | File or directory to analyze. | yes | — |
| platform | Target platform: linux-auditd | windows-sysmon | macos-es. | no | linux-auditd |
| version | opseclint release to use (a tag like v0.1.0, or 'latest'). | no | latest |
| sarif-file | If set, also write SARIF here (e.g. opseclint.sarif) for a code-scanning upload step. | no | "" |
| fail-threshold | If set (0-100), fail the job when the loudest action's detectability is >= this value. | no | "" |
| args | Extra raw arguments passed through to opseclint. | no | "" |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the SARIF file, when sarif-file was requested. |