ppiankov/ClickSpectre

Analyze ClickHouse table usage and publish SARIF findings.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 8, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: ppiankov/clickspectre@26a13e1aef998cb12ccf994da19033361f978939 # v1.1.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
clickhouse-urlClickHouse DSN/URL used for analysis.yes
formatOutput format for ClickSpectre report (`json` or `sarif`).nosarif
fail-onFailure threshold (`none`, `safe`, `likely`, `any`, `anomaly`).nonone
argsExtra arguments passed to `clickspectre analyze`.no""
upload-sarifUpload `report.sarif` to GitHub code scanning when format is `sarif`.notrue
versionClickSpectre release tag to download (for example `v1.0.0` or `latest`).nolatest
binary-pathOptional local ClickSpectre binary path (mainly for CI/smoke tests).no""
namedescription
resolved-versionResolved ClickSpectre version (`latest`, explicit tag, or `local`).
report-jsonPath to generated JSON report (if format=json).
report-sarifPath to generated SARIF report (if format=sarif).
findings-safeNumber of safe-to-drop / zero-usage findings.
findings-likelyNumber of likely-safe findings.
findings-anomalyNumber of anomaly findings.
findings-totalTotal findings across all categories.