missionwired/Detect Secrets Scanner
Scan for VERIFIED hardcoded secrets and upload to GitHub Code Scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Nov 6, 2025
- License
- None
Pinned Snippet
uses: missionwired/secret-scanner-action@b939b4154bc606f33abe79fdaf8edaf5b347d433 # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| scan-path | Directory to scan for secrets (e.g., ./src/.aws-sam/build) | no | . |
| upload-sarif | Upload SARIF results to GitHub Code Scanning | no | false |
| fail-on-detection | Fail workflow if verified secrets detected | no | true |
| debug-mode | Enable verbose diagnostic logging | no | false |
Outputs
no outputs