ppiankov/VaultSpectre Scan
Scan repositories for Vault secret references and validate them against a Vault instance
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| vault-addr | Vault server address | yes | — |
| token | Vault authentication token | yes | — |
| repo-path | Path to repository to scan | no | . |
| format | Output format: text, json, sarif, or spectrehub | no | text |
| fail-on-missing | Exit with error if missing secrets found | no | false |
| stale-days | Days threshold for stale secret detection (0 to disable) | no | 90 |
| baseline | Path to baseline file for suppressing known findings | no | "" |
| version | VaultSpectre version to use (e.g., 0.3.0). Defaults to latest. | no | latest |
| args | Additional arguments to pass to vaultspectre scan | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab (requires format=sarif) | no | false |
Outputs
| name | description |
|---|---|
| exit-code | Exit code from vaultspectre scan |
| report-path | Path to the generated report file |