nyx-sec/Nyx Security Scanner
Run the Nyx multi-language vulnerability scanner on your codebase. Supports Linux and macOS runners (x86_64 and ARM64).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory to scan | no | . |
| version | Nyx release tag (e.g. v0.7.0). "latest" is accepted but discouraged, pinning to a specific tag protects against upstream compromise. | no | v0.7.0 |
| format | Output format: sarif, json, or console | no | sarif |
| fail-on | Exit non-zero if findings meet this severity threshold: HIGH, MEDIUM, or LOW | no | "" |
| args | Additional CLI arguments (e.g. "--severity >=MEDIUM --profile ci") | no | "" |
| token | GitHub token for release download (avoids rate limits) | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| finding-count | Number of findings detected |
| sarif-file | Path to SARIF results file (empty if format is not sarif) |
| exit-code | Nyx exit code (0 = clean, 1 = threshold breached) |
| nyx-version | Installed nyx version |