ppiankov/S3Spectre Scan
Scan repositories for S3 bucket references and audit drift against AWS S3
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| repo-path | Path to repository to scan | no | . |
| aws-profile | AWS profile name | no | "" |
| regions | Comma-separated region filter | no | "" |
| all-regions | Scan all enabled regions | no | true |
| stale-days | Stale prefix threshold in days | no | 90 |
| check-unused | Enable unused bucket detection | no | false |
| format | Output format: text, json, sarif, or spectrehub | no | text |
| fail-on-missing | Exit with error if missing buckets found | no | false |
| fail-on-stale | Exit with error if stale prefixes found | no | false |
| fail-on-unused | Exit with error if unused buckets found | no | false |
| baseline | Path to baseline file for diff comparison | no | "" |
| version | S3Spectre version to use (e.g., 0.3.0). Defaults to latest. | no | latest |
| args | Additional arguments to pass to s3spectre scan | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab (requires format=sarif) | no | false |
Outputs
| name | description |
|---|---|
| exit-code | Exit code from s3spectre scan |
| report-path | Path to the generated report file |