lfreleng-actions/🔐 Sonatype Lifecycle Scan
Runs a Sonatype Lifecycle (Nexus IQ) scan
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 8, 2026
- License
- None
Pinned Snippet
uses: lfreleng-actions/sonatype-lifecycle-scan-action@974066f00a3b7989013bd588cd56f7451933fed8 # v0.1.4tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| nexus_iq_server | Nexus IQ Server URL | yes | — |
| nexus_iq_username | Nexus IQ Username | yes | — |
| nexus_iq_password | Nexus IQ Password | yes | — |
| no_checkout | Do not checkout local repository; used for testing | no | false |
| java_distribution | JAVA SE distribution to setup/run for Nexus CLI tool | no | temurin |
| java_version | Java runtime to setup/run for Nexus CLI tool | no | 17 |
| iq_cli_version | Specific version of Nexus CLI to setup/run | no | latest |
| application_id | Organisation and project name in Nexus IQ | no | ${{ github.repository_owner }}-${{ github.event.repository.name }} |
| scan_targets | Location of file(s) or folder(s) to scan | no | . |
| debug | Enable debugging output | no | false |
Outputs
no outputs