himanshu-sangshetti/Autonomous SOC
Supply chain checks: SBOM diff, provenance, vulnerability and secret scan, AI triage, reports
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| policy | Policy mode: strict, moderate, or audit | no | moderate |
| sbom-format | SBOM format: cyclonedx or spdx | no | cyclonedx |
| fail-on-block | Fail the build when AI triage says AUTO_BLOCK | no | true |
| grype-severity | Minimum Grype severity to fail on: negligible, low, medium, high, critical | no | high |
| skip-ai | Skip AI triage, use policy engine only (no API key needed) | no | false |
| working-directory | Directory for optional npm audit fix (repository-relative, e.g. demo/app) | no | . |
| apply-npm-audit-fix | If true, run npm audit fix --ignore-scripts in working-directory after triage (opt-in) | no | false |
Outputs
no outputs