pipebreach/phantom scan
Detect divergence between a package's declared source and its published artifact
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| spec | Package spec to scan, e.g. requests==2.31.0 | yes | — |
| ecosystem | Package ecosystem | no | pypi |
| sarif-file | Path where the SARIF report is written (removed on execution error) | no | phantom-results.sarif |
| fail-on-out-of-scope | Fail when the release has no pure-Python wheel (phantom exit 3) | no | false |
Outputs
| name | description |
|---|---|
| exit-code | phantom exit code (0 clean, 1 findings, 2 error, 3 out of scope) |
| sarif-file | Path of the written SARIF report |