gvazquezmorean/Gabys GitHub Actions
A set of actions to identify vulnerabilities in your workflows using Sonatype's security solutions.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| iq-server-url | Lifecycle (IQ Server) URL (e.g. http://localhost:8070). | yes | — |
| username | The username to authenticate with Lifecycle (IQ Server). | yes | — |
| password | The password to authenticate with Lifecycle (IQ Server). | yes | — |
| application-id | Lifecycle (IQ Server) application ID. When Automatic Applications is enabled and the application ID has not yet been used, a new application will be created with the given ID. | yes | — |
| scan-targets | Space-separated list of paths to specific files, directories, or docker images. Apache Ant-styled patterns are allowed. | yes | — |
Outputs
| name | description |
|---|---|
| scan-id | Scan id result of the run operation. It can be used to access the Lifecycle report of related artifacts. |
| report-url | Link to navigate directly to the analysis report in Lifecycle (IQ Server). |