nevaberry/OpenCodeCommit Scan
Run occ scan in GitHub Actions with optional SARIF upload, annotations, and manual override.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | opencodecommit npm package version to install. | no | latest |
| enforcement | Sensitive enforcement mode passed to occ scan. | no | block-high |
| diff-source | Diff source used when reading from git. | no | auto |
| config | Optional path to config.toml. | no | "" |
| allowlist | Optional extra allowlist TOML for CI-specific suppressions. | no | "" |
| upload-sarif | Upload the generated SARIF report to GitHub code scanning. | no | true |
| emit-annotations | Emit GitHub workflow annotations from the scan findings. | no | true |
| continue-on-blocking-findings | Preserve reports but do not fail the workflow when occ scan exits 2. | no | false |
Outputs
| name | description |
|---|---|
| exit-code | Raw occ scan exit code. |
| blocked | Whether occ scan reported blocking findings. |
| sarif-path | Path to the generated SARIF file. |