lgmorand/Credentials scanning

Scan source code to find if credentials have been hardcoded

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Oct 22, 2025
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: lgmorand/github-action-composite-credscanning@f774ad183edc66cba56713bcbb83d3fafe835282 # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
folderToScanThe folder where to scan filesyes/src
namedescription
scanned-filesNumber of files scanned