projectdiscovery/Nuclei Action

A fast, open-source, and highly customizable vulnerability scanner.

View on GitHub

Trust Signals

Scorecard Score
Scorecard 2–4scored Jul 6, 2026
Maintenance Recency
Activelast commit Mar 29, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: projectdiscovery/nuclei-action@32a91c0da7be14c07b0ade6c14fa0f6e78d97c9c # v3.1.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
versionSetup with specific version ("latest" or in format "vX.Y.Z").yeslatest
install-onlyInstall Nuclei without running scans.nofalse
argsArguments to pass to Nuclei.no
configNuclei configuration file content.no
config-pathPath to Nuclei configuration file.no
cacheEnable caching of Nuclei caches, configs, templates, and browser.notrue
tokenGitHub Token. It is used to fetch Nuclei releases from GitHub.yes${{ github.token }}
namedescription
stdoutThe standard output from running Nuclei.
stderrThe standard error from running Nuclei.