projectwarden/Warden, CI/CD Security Scanner
Find and fix GitHub Actions vulnerabilities: unpinned actions, script injection, secret exfiltration, and 50+ more rules.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan | — | . |
| fail-on | Minimum severity to fail (critical, high, medium, low, none) | — | high |
| format | Output format (console, json, sarif, markdown) | — | console |
Outputs
| name | description |
|---|---|
| results-json | JSON findings payload for downstream steps (populate by running warden with format=json and piping stdout into $GITHUB_OUTPUT). |