| url | The URL to scan. Must match a domain in your .scannr.yml (if present). | yes | — |
| depth | Maximum crawl depth from the starting URL | no | 3 |
| max | Maximum number of URLs to scan | no | 300 |
| timeout | Request timeout in seconds | no | 5 |
| format | Output format: table, json, or csv | no | table |
| status | Filter results: all, ok, or broken | no | all |
| filter | Filter displayed results by element type: all, a, link, script, img, media, form | no | all |
| scan-elements | Element types to scan: all, or comma-separated list (e.g., a,img) | no | all |
| sitemap | Use sitemap.xml to discover URLs before crawling | no | false |
| js | Enable JavaScript rendering for SPA/React sites | no | false |
| smart-js | Automatically enable JS rendering when SPA signals are detected | no | false |
| no-robots | Ignore robots.txt rules (Disallow/Crawl-delay) | no | false |
| advanced | Show XML namespaces, CDN preconnect hints, and JS framework error docs in output | no | false |
| strip-params | Additional tracking parameters to strip (comma-separated) | no | — |
| delay-min | Minimum delay between requests in milliseconds | no | — |
| delay-max | Maximum delay between requests in milliseconds | no | — |
| fail-on-broken | Fail the GitHub Action step if any broken links are found | no | false |
| fail-on-critical | Fail the GitHub Action step if critical integrity issues are found | no | false |
| min-rating | Minimum acceptable integrity rating (excellent, good, needs_attention). Fails the step if the site scores below this threshold. | no | — |