hisopo/SiteShadow Scan
Scan changed files in a PR for security vulnerabilities using SiteShadow SAST
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-key | SiteShadow API key | yes | — |
| fail-on | Fail the check if findings at this severity or above are found. Options: critical, high, medium, low, none | no | critical |
| comment | Post a PR comment with findings summary | no | true |
| sarif | Upload SARIF to GitHub Code Scanning | no | true |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| critical-count | Number of critical findings |
| high-count | Number of high findings |
| sarif-file | Path to the SARIF output file |