midnightntwrk/Scan and Upload
Performs scan with SARIF upload to GitHub Security
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 11, 2026
- License
- Apache 2.0
Pinned Snippet
uses: midnightntwrk/upload-sarif-github-action@9da05ae8b0dc1b97a0a25f809deb586c06b7ad3e # no releases — HEAD as of 2026-07-11tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GitHub token for API calls (optional) | no | "" |
| scorecard_checks | Comma-separated list of Scorecard checks to run. If empty, all checks run. See https://github.com/ossf/scorecard#checks for available checks. | no | "" |
| fail_severity | Fail the action when scans report this severity or higher (e.g. critical, high, medium). This must be set on private repos. | no | critical |
| skip_opengrep_scan | Set to 'true' to skip the OpenGrep SAST scan | no | false |
| skip_scorecard_scan | Set to 'true' to skip the Scorecard supply-chain scan | no | false |
| skip_checkov_scan | Set to 'true' to skip the Checkov IaC misconfiguration scan | no | false |
| skip_zizmor_scan | Set to 'true' to skip the zizmor GitHub Actions scan | no | false |
| skip_trivy_scan | Set to 'true' to skip the Trivy vulnerability scan | no | false |
| skip_gitleaks_scan | Set to 'true' to skip the gitleaks secret scan | no | false |
Outputs
no outputs