ostorlab/Ostorlab Security Scanner
Scan mobile apps for outdated dependencies, hardcoded secrets, privacy leakages, and insecure code (Signup at ostorlab.co).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scan_profile | Specifies your scan profile ( free "fast_scan" for community scans and "full_scan" for full analysis) | yes | fast_scan |
| asset_type | Type of asset to scan. (['android-apk', 'android-aab', 'ios-ipa']) | yes | — |
| target | Path to file .apk|.ios file. | yes | — |
| scan_title | Title for your scan. | no | — |
| ostorlab_api_key | Api key from ostorlab. | yes | — |
| break_on_risk_rating | Wait for the scan results and force the action to fail if the scan risk rating is equal or higher this value. (['HIGH', 'MEDIUM', 'LOW','POTENTIALLY]) | no | — |
| max_wait_minutes | Specifies the maximum number of minutes to wait for scan results. | no | 20 |
| extra | Extra args to be passed to Ostorlab CLI to create a scan, common case is setting test credentials. | no | — |
Outputs
| name | description |
|---|---|
| scan_id | id of the created scan. |
| status | status of scan. |