| scope | File that includes the list of repositories to monitor. Required when not using local-results-path. | no | — |
| database | File that stores the state of the scorecard | yes | — |
| report | File that stores the report of the scorecard | yes | — |
| auto-commit | Automatically commit the changes to the repository | no | — |
| auto-push | Automatically push the changes to the repository | no | — |
| generate-issue | Automatically generate an issue with the discrepancies | no | — |
| issue-title | Title of the issue to be generated | no | OpenSSF Scorecard Report Updated! |
| issue-assignees | List of assignees for the issue to be generated | no | — |
| issue-labels | List of labels for the issue to be generated | no | — |
| discovery-enabled | Enable the automatic update of the scope file | no | — |
| discovery-orgs | List of organizations to be included in the scope file | no | — |
| report-tags-enabled | Enable the use of tags in the report | no | — |
| report-start-tag | Start tag to be used in the report | no | <!-- OPENSSF-SCORECARD-MONITOR:START --> |
| report-end-tag | End tag to be used in the report | no | <!-- OPENSSF-SCORECARD-MONITOR:END --> |
| github-token | Token to access the repository | yes | — |
| max-request-in-parallel | Maximum number of HTTP requests to be executed in parallel | no | 10 |
| render-badge | Render the OpenSSF Scorecard badge in the report | no | false |
| report-tool | Tool to be included as link in the report | no | scorecard-visualizer |
| results-path | Path to a Scorecard results JSON file. When provided, scores are read from this file instead of the public Scorecard API. The file should contain an array of Scorecard JSON v2 result objects (e.g., from scorecard --format=json2, scorecard --org, or Allstar). When set, the scope input is not required. | no | — |