kelleyblackmore/DISA ASD STIG Scan
Run stig-asd-scanner (DISA Application Security & Development STIG V6R4) against a live web app and emit SARIF/JUnit for CI.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| config | Path to the scanner YAML config (relative to the caller workspace). | yes | — |
| format | Output format: text | json | sarif | junit | no | sarif |
| output | Write the report to this file. | no | stig-asd-scanner.sarif |
| fail-severity | Minimum finding severity for a non-zero exit: critical | high | medium | low | info | no | critical |
| args | Extra raw args appended to the scanner invocation (e.g. --include-passed --verbose). | no | "" |
Outputs
no outputs