pkmdev-sec/Morphex Secret Scanner
Find real secrets in your code. Skips the noise — only flags what actually matters.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (default: current directory) | no | . |
| threshold | Confidence threshold 0.0-1.0 (default: 0.7) | no | 0.7 |
| deep | Enable deep scanning for obfuscated secrets | no | false |
| sarif | Upload SARIF results to GitHub Code Scanning | no | false |
| fail-on-findings | Fail the workflow if secrets are found | no | true |
| baseline | Path to baseline file for suppressing known findings | no | "" |
| version | Morphex version to install | no | latest |
Outputs
| name | description |
|---|---|
| findings | Number of secrets found |
| sarif-file | Path to generated SARIF file (if sarif=true) |