picatz/Taint Analyzers
Runs picatz/taint's SARIF-capable analyzer CLIs (sqli, cmdi, ptrv, ssrf, xss, logi) against a Go target and, optionally, uploads the results to GitHub code scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| detectors | Comma-separated list of detector CLIs to run. Supported values: sqli, cmdi, ptrv, ssrf, xss, logi. | no | sqli,cmdi,ptrv,ssrf,xss,logi |
| target | Go package pattern to analyze (passed to each detector CLI). | no | ./... |
| upload | Upload SARIF results to GitHub code scanning via github/codeql-action/upload-sarif. | no | true |
Outputs
| name | description |
|---|---|
| results-dir | Directory containing the SARIF file written by each requested detector. |