jameswoolfenden/ghat
Pin GitHub Actions, GitLab CI, pre-commit, Terraform, Kubernetes and Dockerfile dependencies to immutable hashes/digests.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| verb | ghat subcommand to run (sweep, swot, shake, sift, swipe, stun, kube, dock, audit) | no | sweep |
| directory | Directory to scan | no | . |
| file | Single file to process (overrides directory) | no | "" |
| dryrun | Show changes without writing files | no | false |
| github_token | GitHub token for API calls | no | ${{ github.token }} |
Outputs
no outputs