homeofe/Supply Chain Guard
Scan your repository for supply-chain malware indicators. Detects GlassWorm and similar campaigns.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (defaults to repository root) | no | . |
| format | Output format for the report/PR comment: text, json, markdown, sarif, sbom, html, badge, gitlab, junit | no | markdown |
| min-severity | Minimum severity to report: critical, high, medium, low, info | no | low |
| exclude-rules | Comma-separated list of rule IDs to exclude | no | "" |
| fail-on | Fail the check if findings at this severity or above are found: critical, high, medium, low | no | critical |
| comment-on-pr | Post findings as a PR comment (true/false) | no | true |
Outputs
| name | description |
|---|---|
| score | Risk score (0-100) |
| risk-level | Risk level: clean, low, medium, high, critical |
| findings-count | Total number of findings |
| report | Full scan report in the requested format |