igibek/Argus Action
Static analyzer for GitHub Actions workflow and third-party actions to detect code injection vulnerabilities.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| mode | Argus supports two modes of operation. The "action" mode can be used to analyze the custom actions, the "repo" mode is used to analyze the repository workflows | yes | repo |
| workflow | Workflow to analyze. By default it will analyze all the workflows under .github/workflows folder. This maybe time consuming. | no | — |
| reference | The repository reference (branch, tag, commit) that will be used during scan | no | ${{ github.sha }} |
Outputs
no outputs