ppiankov/GCPSpectre Scan
Detect GCP resource waste — idle VMs, detached disks, unused IPs, stale snapshots, idle Cloud SQL, NAT, Functions, load balancers
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| project | GCP project ID (repeatable via comma-separated list) | no | "" |
| idle-days | Lookback window for utilization metrics | no | 7 |
| stale-days | Age threshold for stale snapshots | no | 90 |
| min-monthly-cost | Minimum monthly cost to report (dollars) | no | 1.0 |
| format | Output format: text, json, sarif, or spectrehub | no | text |
| timeout | Scan timeout | no | 10m |
| fail-on | Exit non-zero when findings meet severity (high, medium, low) | no | "" |
| threshold | Minimum finding count to trigger non-zero exit (requires fail-on) | no | 1 |
| exclude-label | Exclude resources by label (key=value or key-only, comma-separated) | no | "" |
| version | GCPSpectre version to use (e.g., 0.2.0). Defaults to latest. | no | latest |
| args | Additional arguments to pass to gcpspectre scan | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab (requires format=sarif) | no | false |
Outputs
| name | description |
|---|---|
| exit-code | Exit code from GCPSpectre scan |
| report-path | Path to the generated report file |