realnits/Ansible Security Scan
Scan Ansible playbooks for security issues
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Nov 13, 2025
- License
- MIT
Pinned Snippet
uses: realnits/ansiblesec@ca11b95c7e8c3ee7362e3080c12dea2c9725d2d5 # v0.1.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (playbook or directory) | no | . |
| rules | Path to custom rules file | no | — |
| output | Output file path | no | ansiblesec-report.json |
| format | Output format (text, json, sarif) | no | sarif |
| fail-on-findings | Fail the action if findings are detected | no | true |
| version | ansiblesec version to use | no | latest |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| critical-count | Number of critical findings |