ppiankov/KafkaSpectre Audit
Audit Kafka clusters for unused topics, consumer group drift, and configuration issues
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| bootstrap-server | Kafka bootstrap server(s), host:port (comma-separated for multiple) | yes | — |
| auth-mechanism | SASL mechanism: PLAIN, SCRAM-SHA-256, SCRAM-SHA-512 | no | "" |
| username | SASL username | no | "" |
| password | SASL password | no | "" |
| tls | Enable TLS | no | false |
| tls-ca | Path to TLS CA certificate | no | "" |
| format | Output format: text, json, sarif, or spectrehub | no | text |
| exclude-internal | Exclude internal topics (__consumer_offsets, etc.) | no | false |
| exclude-topics | Topic names/globs to exclude (comma-separated) | no | "" |
| timeout | Kafka query timeout | no | 10s |
| version | KafkaSpectre version to use (e.g., 0.2.0). Defaults to latest. | no | latest |
| args | Additional arguments to pass to kafkaspectre audit | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab (requires format=sarif) | no | false |
Outputs
| name | description |
|---|---|
| exit-code | Normalized exit code from kafkaspectre audit |
| report-path | Path to the generated report file |