hatakusec/Security Gate Action
Multi-scanner security analysis: secrets, dependencies, IaC, and containers with configurable policy enforcement.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| config_path | Path to the Security Gate configuration file (relative to repository root) | no | .security-gate.yml |
| fail_on | Minimum severity level that will cause the action to fail. Options: high, medium, low | no | high |
| mode | Scanner mode. "auto" detects and runs relevant scanners; "explicit" only runs scanners enabled in config | no | auto |
| verbose | Enable verbose debug logging (secrets are still masked) | no | false |
| working_directory | Directory to scan (relative to repository root). Useful for monorepos | no | . |
| sarif_output | Path to write SARIF output file. If not set, SARIF output is disabled | no | "" |
Outputs
| name | description |
|---|---|
| findings_count | Total number of security findings detected |
| high_count | Number of high-severity findings |
| medium_count | Number of medium-severity findings |
| low_count | Number of low-severity findings |
| passed | Whether the security gate passed (true/false) |
| sarif_path | Path to SARIF output file (if enabled) |