jampanikomal/TraceState compliance scan
Scan a repository against policy-as-code security and compliance rules (ISO 27001, DPDP Act, PCI DSS, HIPAA, OWASP...). Writes SARIF for code scanning and a Markdown report to the job summary.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory to scan, relative to the workspace. | — | . |
| fail-on | Fail the step on findings at or above this severity (critical, high, medium, low, info, none). | — | high |
| rules | Extra rule files, one per line. A rule with a built-in ID overrides the built-in rule. | — | "" |
| no-default-rules | Set to true to use only the rule files given in `rules`. | — | false |
| exclude | Globs to leave out of the scan, one per line (for example `tests/**`). | — | "" |
| online | Set to true to look up dependency advisories on OSV.dev. | — | false |
| ledger | Ledger file to record the scan in. Empty means no ledger. | — | "" |
| sarif-file | Where to write the SARIF report. | — | tracestate.sarif |
| markdown-file | Where to write the Markdown report. | — | tracestate.md |
| summary | Set to false to skip writing the report to the job summary. | — | true |
| version | TraceState release to install (for example v2.0.0), `latest`, or `source` to build the checked-out action with the Go toolchain on the runner. | — | latest |
Outputs
| name | description |
|---|---|
| exit-code | The scan's exit code: 0 clean, 1 findings at or above fail-on, 2 error. |
| sarif-file | Path of the SARIF report. |
| markdown-file | Path of the Markdown report. |