kelleyblackmore/Vulnerability Scan Service (VSS)
Self-service vulnerability scanning for open source binaries (npm, Python, RPM, etc.) with checksum verification and detailed reporting
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | Path to the binary, package, or directory to scan (e.g., package.json, requirements.txt, *.rpm, *.whl) | no | — |
| url | URL to download the package/binary from before scanning | no | — |
| package-type | Explicitly specify package type: npm, python, ruby, go, rust, rpm, deb, or auto-detect (default: auto) | no | auto |
| output-file | Output file path for scan results and metadata (default: vss-report.json) | no | vss-report.json |
| format | Output format: json, sarif, or table (default: json) | no | json |
| fail-on-vuln | Fail the action if vulnerabilities are found (true/false) | no | false |
Outputs
| name | description |
|---|---|
| report-file | Path to the generated vulnerability report file |
| vulnerabilities-found | Number of vulnerabilities found |
| checksum | SHA256 checksum of the scanned target |