orcasecurity/Orca Security - SAST Security
Configures Orca CLI to run SAST scans
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Feb 17, 2026
- License
- Apache 2.0
Pinned Snippet
uses: orcasecurity/shiftleft-sast-action@9243198fba5faa2f7711f53df251084c601a90cb # v1.0.10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| api_token | Orca API Token used for Authentication | yes | — |
| exit_code | Exit code for failed execution due to policy violations | no | — |
| no_color | Disable color output | no | false |
| project_key | Project Key name | yes | — |
| silent | Disable logs and warnings output | no | false |
| disable_err_report | Suppress error reporting to the monitoring platform | no | false |
| path | Paths or directories to scan (comma-separated) | yes | — |
| exclude_paths | List of paths to be excluded from scan (comma-separated) | no | — |
| format | Format for displaying the results | no | — |
| output | Output directory | no | — |
| timeout | Set the maximum duration for the CLI execution. valid time units ("s", "m", "h") | no | — |
| preview_lines | Number of lines to be display in CLI results | no | — |
| console_output | Prints results to console in the provided format (only when --output is provided) | no | — |
| config | Path to configuration file (json, yaml or toml) | no | — |
| show_annotations | Show github annotations on pull requests | no | true |
| max_file_size | Maximum file size to be scanned in MB. Bigger files will be skipped | no | — |
| display_name | Scan log display name (on Orca platform) | no | — |
| debug | Debug mode | no | false |
| log_path | The directory path to specify where the logs should be written to on debug mode. Default to the current working directory | no | — |
| custom_sast_controls | path to custom sast controls directory | no | — |
| strict_mode | fail immediately if any SAST custom controls fail validation | no | false |
Outputs
| name | description |
|---|---|
| exit_code | The status of the scan |