moose11b/Bulwark DAST Gate
Dynamic security scan of a running application as a CI gate. Fails the build on findings and uploads SARIF to the Security tab.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | URL, domain, or IP to scan (e.g. http://localhost:3000) | yes | — |
| profile | Scan profile: headers | web | network | full | no | web |
| fail-on | Fail the build on findings at/above this severity: critical | high | medium | low | never | no | high |
| sarif-file | Path to write SARIF output | no | bulwark-results.sarif |
| upload-sarif | Upload SARIF to the GitHub Security tab | no | true |
| no-enrich | Skip NVD/EPSS/KEV CVE enrichment (faster) | no | false |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| highest-severity | Highest severity found |
| gate-passed | Whether the gate passed (true/false) |