lfreleng-actions/🔐 GitHub Security Report
Security and quality reporting across GitHub organisations
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scope | Operating mode: auto | org | repo | no | auto |
| config | JSON config (raw or base64), e.g. a vars/secrets entry | no | "" |
| org | Single organisation (shorthand for org mode) | no | "" |
| repo | owner/name for repo mode (defaults to this repository) | no | "" |
| token | GitHub token (classic PAT for org mode; GITHUB_TOKEN for repo mode) | no | "" |
| token_env | Environment variable name the tool reads the token from | no | GITHUB_TOKEN |
| output_dir | Directory for GitHub Pages output (org mode) | no | "" |
| pages_url | Published GitHub Pages URL (used in the Slack link) | no | "" |
| slack_channel | Slack channel ID; overrides the config slack.channel (e.g. the SLACK_CHANNEL_ID variable) | no | "" |
| top_n | Offenders shown per signal across all outputs (0 = no limit; default: config, else 10); per-output inputs below override it | no | "" |
| top_n_report | Offenders shown per signal in the GitHub Pages output (0 = no limit; overrides top_n) | no | "" |
| top_n_cli | Offenders shown per signal in the terminal output (0 = no limit; overrides top_n) | no | "" |
| top_n_slack | Offenders shown per signal in the Slack digest (0 = no limit; overrides top_n) | no | "" |
| fail_threshold | none | low | medium | high | critical | any (repo mode gate) | no | none |
| force_notify | Post to Slack regardless of report_day | no | false |
| tool_version | Published PyPI version to run; ignored on pull_request or when use_local_source is true (both run from the checked-out source). Empty (the default) uses the Dependabot-managed pin in .github/runtime-pin/requirements.txt | no | "" |
| use_local_source | Run from this checked-out source instead of the PyPI release (for testing unreleased code from any event) | no | false |
Outputs
| name | description |
|---|---|
| should_notify | Whether today is a Slack notification day |
| slack_payload | Prebuilt Slack chat.postMessage payload (JSON) |
| failed | Whether the repo-mode fail threshold was met |