nikhil172913832/CodeGuard Dependency Vulnerability Scan
Scan npm lockfiles with OSV and output a structured summary for CI runs.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| repo-path | Repository path to scan. | no | . |
| lockfile-path | Optional lockfile path relative to repo-path. | no | "" |
| output-json-path | Output path for JSON report. | no | codeguard-report.json |
| output-markdown-path | Output path for markdown report. | no | codeguard-summary.md |
| max-visible-findings | Maximum findings to render in markdown output. | no | 25 |
| fail-on-findings | Fail the workflow when findings are present. | no | false |
| fail-threshold | Fail threshold (ACTIVE_EXPLOIT, CRITICAL, HIGH, MEDIUM, LOW, NEVER). | no | HIGH |
| comment-mode | PR comment mode (off, sticky, new). | no | off |
| comment-tag | Marker tag used to identify a sticky comment. | no | codeguard:scan |
| kev-url | Optional override for KEV catalog URL. | no | "" |
| epss-url | Optional override for EPSS API URL. | no | "" |
| python-version | Python version used to run the scanner. | no | 3.12 |
| job-summary | Write markdown output to GITHUB_STEP_SUMMARY. | no | true |
Outputs
| name | description |
|---|---|
| scan_status | Scan status (ok, findings, or error). |
| findings_total | Number of findings detected. |
| report_json_path | Location of the JSON report file. |
| report_markdown_path | Location of the markdown report file. |
| pr_comment_url | PR comment URL when comment-mode is sticky or new. |