kkloudtarus/Synapse SCA scan
Run a Synapse SCA + SAST + secret + IaC-misconfig scan and gate CI on findings.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan. A source directory, or — with image: true — a container image reference or a local `docker save` tarball (.tar/.tar.gz). | no | . |
| image | When true, scan `path` as a container image (registry ref or local docker-save tarball) instead of a source tree. Runs SCA + OS-package CVE + secret + misconfig; source SAST is skipped for images. | no | false |
| fail-on | Minimum severity that fails the build: critical | high | medium | low | info | none. | no | high |
| sarif | When true, write a SARIF 2.1.0 report and expose its path as the `sarif-file` output. | no | false |
| offline | When true, run without network egress (offline databases only). | no | false |
| version | synapse-cli release to use, e.g. "v0.1.0", or "latest". | no | latest |
| sarif-output | Path for the SARIF report when `sarif` is true. | no | synapse.sarif |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF report (only when `sarif` is true). |