rdx644/ZeroPatch CI
Statically scan GitHub Actions workflows and produce a review-only security report.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| workflow-path | A workflow YAML file or directory to scan, relative to the repository workspace. | no | .github/workflows |
| report-path | JSON report path, relative to the repository workspace. | no | .zeropatch/zeropatch-report.json |
| fail-on | Minimum severity that fails the step: never, critical, high, medium, or low. | no | critical |
Outputs
| name | description |
|---|---|
| report-path | Relative path to the generated JSON report. |
| finding-count | Number of findings across all scanned workflows. |
| blocking-findings | Number of findings at or above the selected fail-on severity. |