narthanaj/Outline Security Reporter

Parses security scan reports and uploads them to Outline with per-app layout, UPDATE-or-CREATE latest, immutable history archive, and retention.

Trust Signals

name	description	required	default
api-key	Outline API Key (must have create + update + archive on the target collection).	yes	—
base-url	Outline Base URL (https://...).	yes	—
collection-id	UUID of the Outline collection to publish to.	yes	—
report-files	Comma-separated glob patterns for report files (e.g. security-reports/*.json).	yes	—
short-code	App short code (e.g. NTH-AXT-FL-WA). Use _infra for non-app scans.	no	""
component	Sub-app component (matrix.component). 'app' for single-image apps.	no	app
retention-count	History docs to keep per (app, component) before archiving oldest. 0 = no prune.	no	100
publish-path	DEPRECATED: legacy folder path. Use short-code + component instead.	no	""
project-name	Project name displayed in the document body (e.g. FleetLink).	no	""
job-url	URL of the originating GitHub Actions run (used as a back-link in the report).	no	""
commit-sha	Commit SHA for history doc naming. Falls back to $GITHUB_SHA.	no	""
dry-run	Print resolved paths and exit without calling Outline. Useful for previews.	no	false

no outputs