portswigger-cloud/defectdojo findings threshold

A GitHub Action that evaluates the active findings against thresholds set by the user

View on GitHub

Trust Signals

Scorecard Score
Scorecard 2–4scored Jul 6, 2026
Maintenance Recency
Activelast commit Feb 27, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: portswigger-cloud/defectdojo-findings-thresholds@c81f73200d012d1bb3ea6a3027635830100e9805 # v1.0.2

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
defectdojo-urlthe url of your defectdojo instanceyes
defectdojo-usernamethe username to login into your defectdojo instanceyes
defectdojo-passwordthe password to login into your defectdojo instanceyes
defectdojo-productthe defectdojo product that the scan result relates toyes
client-certificate-file-paththe file path for a client side certificate if requiredno
client-key-file-paththe file path for a client side private key if requiredno
total-thresholdtotal findings thresholdnofalse
critical-thresholdcritical findings thresholdnofalse
high-thresholdhigh findings thresholdnofalse
medium-thresholdmedium findings thresholdnofalse
low-thresholdlow findings thresholdnofalse
info-thresholdinfo findings thresholdnofalse

no outputs