mlaify/AttackMap
Run AttackMap defensive security analysis, upload SARIF, and produce a PR summary comment.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan. | no | . |
| extras | pip extras to install (e.g. 'all' for every analyzer plugin, or 'llm'). | no | all |
| baseline | Optional path to a prior attackmap-report.json for diff/gating. | no | "" |
| fail-on-new-high | Fail the job if the diff introduces new HIGH-severity findings (requires baseline). | no | false |
| output | Directory for generated reports. | no | attackmap-reports |
| cve | Cross-reference dependencies against OSV.dev (network I/O). | no | false |
Outputs
| name | description |
|---|---|
| pr-comment-file | Path to the rendered Markdown PR summary comment. |
| sarif-file | Path to the SARIF report (for code-scanning upload). |