ppiankov/ClickSpectre
Analyze ClickHouse table usage and publish SARIF findings.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 8, 2026
- License
- MIT
Pinned Snippet
uses: ppiankov/clickspectre@26a13e1aef998cb12ccf994da19033361f978939 # v1.1.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| clickhouse-url | ClickHouse DSN/URL used for analysis. | yes | — |
| format | Output format for ClickSpectre report (`json` or `sarif`). | no | sarif |
| fail-on | Failure threshold (`none`, `safe`, `likely`, `any`, `anomaly`). | no | none |
| args | Extra arguments passed to `clickspectre analyze`. | no | "" |
| upload-sarif | Upload `report.sarif` to GitHub code scanning when format is `sarif`. | no | true |
| version | ClickSpectre release tag to download (for example `v1.0.0` or `latest`). | no | latest |
| binary-path | Optional local ClickSpectre binary path (mainly for CI/smoke tests). | no | "" |
Outputs
| name | description |
|---|---|
| resolved-version | Resolved ClickSpectre version (`latest`, explicit tag, or `local`). |
| report-json | Path to generated JSON report (if format=json). |
| report-sarif | Path to generated SARIF report (if format=sarif). |
| findings-safe | Number of safe-to-drop / zero-usage findings. |
| findings-likely | Number of likely-safe findings. |
| findings-anomaly | Number of anomaly findings. |
| findings-total | Total findings across all categories. |