invisirisk/InvisiRisk PSE Security Proxy
Sets up PSE Security Proxy for secure package downloads
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api_url | InvisiRisk API URL | no | https://app.invisirisk.com |
| app_token | Authentication token for the InvisiRisk API. If omitted, the action signs in securely with GitHub. | no | — |
| github_token | GitHub token used to resolve the current numeric workflow ID. Auto-populated; OIDC mode requires actions: read permission. | no | ${{ github.token }} |
| debug | Enable debug mode for verbose logging | no | false |
| mode | The operation mode: "native" (default) downloads and runs the PSE binary directly, "sidecar" pulls and runs the PSE proxy as a Docker container. | no | native |
| pse_image_tag | Sidecar mode only: tag for the fixed invisirisk/pse-proxy image. Defaults to latest. | no | latest |
| collect_dependencies | Set to true to collect dependency graphs during cleanup, false to skip. Default is true if not specified. | no | "" |
| collect_job_status | Set to true to collect GitHub Actions workflow status during cleanup, false to skip. Default is true if not specified. | no | true |
| workdir | Working directory to use as the project path for dependency graph collection. Defaults to the current directory (pwd) if not specified. | no | "" |
| send_job_status | [DEPRECATED] GitHub Actions workflow status collection is now handled internally by the action and this input does nothing. Will be removed in a future release. | no | false |
| cleanup | [DEPRECATED] Cleanup is now handled internally by the action and this input does nothing. Will be removed in a future release. | no | false |
Outputs
no outputs