ppiankov/GCSSpectre Scan
Audit GCP Cloud Storage buckets for drift, lifecycle misconfigurations, and public access
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| project | GCP project ID | yes | — |
| repo-path | Path to repository to scan | no | . |
| stale-days | Stale prefix threshold in days | no | 90 |
| check-public | Check for public bucket access | no | true |
| severity | Minimum severity filter: critical, high, medium, or low | no | "" |
| concurrency | Max concurrent GCS API calls | no | 10 |
| format | Output format: text, json, sarif, or spectrehub | no | text |
| baseline | Path to baseline file for diff comparison | no | "" |
| timeout | Operation timeout (for example, 5m) | no | "" |
| version | GCSSpectre version to use (e.g., 0.3.0). Defaults to latest. | no | latest |
| args | Additional arguments to pass to gcsspectre scan | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab (requires format=sarif) | no | false |
Outputs
| name | description |
|---|---|
| exit-code | Exit code from gcsspectre scan |
| report-path | Path to the generated report file |