queenfrisk/OpenSentinel Security Scan
Supply chain security scanner — detects malicious packages, CVEs, behavioral anomalies, and maintainer reputation issues
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to the project to scan | no | . |
| severity | Comma-separated list of severity levels to include in output (low,medium,high,critical) | no | "" |
| fail-on | Minimum severity that causes the workflow step to fail (medium | high | critical) | no | high |
| format | Output format for the report file (json | table | html | sbom) | no | json |
| output | Path to write the report file. Leave empty to skip file output. | no | opensentinel-report.json |
| github-token | GitHub token for fetching security advisories (recommended) | no | "" |
Outputs
| name | description |
|---|---|
| exit-code | 0=safe, 1=medium+, 2=high+, 3=critical |
| report-path | Path to the generated report file |
| critical-count | Number of critical severity packages found |
| high-count | Number of high severity packages found |