pirateape/ApeGuard Security Scan
Layered security scanning with Zero Trust scoring — Gitleaks, Semgrep, Trivy, Nuclei. Maps every finding to the 8-pillar Unified Zero Trust Framework (UZTF).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scan-path | Directory or repository to scan | no | . |
| layers | Scanner layers to enable (comma-separated: secrets,sast,sca,container,dast) | no | secrets,sast,sca |
| format | Report format (md, json, sarif, html) | no | sarif |
| upload-sarif | Upload SARIF results to GitHub Security tab (requires format: sarif) | no | true |
| version | ApeGuard version to use (e.g., "0.1.0" or "latest") | no | latest |
| fail-on | Fail workflow on findings at this severity or above (never, high, critical) | no | never |
Outputs
| name | description |
|---|---|
| overall-score | Overall UZTF score (0–800) |
| findings-count | Total number of findings detected |
| report-path | Path to the generated report file |