mobb-dev/mobbdev
Mobb automatic vulnerability fixer action
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| report-file | Path to SAST report file. Omitting this input enables Mobb's scan-and-fix mode: the Mobb CLI performs its own internal SAST scan (via opengrep) instead of consuming an external report. | no | — |
| api-key | Mobb API key | yes | — |
| github-token | GitaHub Token | yes | — |
| mobb-project-name | Mobb Project Name | no | — |
| auto-pr | Auto-PR flag | no | — |
| commit-directly | Commit Directly flag, this requires Auto-PR flag to be set. Once enabled, Mobb will commit the fixes directly to the branch | no | — |
| organization-id | Organization ID | no | — |
| diff-aware | Part of Mobb's scan-and-fix mode (enabled by omitting report-file). When true and the workflow is triggered by a pull_request event, Mobb performs a diff-aware scan limited to changes since the PR base SHA (passed as --baseline-commit). Has no effect outside PR context. Defaults to false. | no | false |
Outputs
| name | description |
|---|---|
| fix-report-url | Mobb fix report URL |