netriseinc/NetRise ZeroLens Scan
Scans binaries for CWE risks, uploads them to the ZeroLens API, and emits reports that fail/warn your build based on policy.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| token | API token (X-Authorization header) | yes | — |
| binary | Path or glob to binary file(s) to upload | yes | — |
| wait | Wait for processing to complete? | no | true |
| poll_interval | Polling interval (e.g. 5s) | no | 5s |
| timeout | Maximum wait time per binary (e.g. 10m) | no | 10m |
| ai_analysis | Request AI analysis after findings? | no | false |
| fail_on_cwe | Comma-separated list of CWE IDs that fail the build if present | no | — |
| warn_on_cwe | CWE IDs that warn but do not fail | no | — |
| max_findings | Fail if total findings exceed this number (0 = disabled) | no | 0 |
| report_path | Where to write the full Markdown report | no | zerolens-report.md |
| upload_artifact | Upload the report via actions/upload-artifact | no | true |
| continue_on_error | Do not fail job even if policy violated | no | false |
| comment_pr | Post a summary comment on pull requests | no | false |
| create_report_pr | Create a draft PR containing the full report | no | false |
| sarif_path | If set, also emit findings in SARIF format to this path | no | — |
| github_token | GitHub token used for PR comments (defaults to GITHUB_TOKEN env) | no | — |
Outputs
| name | description |
|---|---|
| hashes | JSON array of SHA-256 hashes uploaded |
| findings_json | Raw JSON of findings per binary |
| ai_json | Raw AI analysis JSON (empty when ai_analysis=false) |
| report | Path to the generated Markdown report |
| sarif | Path to the SARIF file (empty when disabled) |
| violations | JSON list of policy violations that triggered warn/fail |