revanite-io/Open Source Project Security Baseline Scanner
Run Open Source Project Security Baseline assessments on your GitHub repository
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| owner | Repository owner (organization or user) | yes | — |
| repo | Repository name | yes | — |
| token | GitHub Personal Access Token with repo read permissions | yes | — |
| catalog | OSPS catalog to assess against | no | osps-baseline |
| output-format | Output format (yaml, json, or sarif) | no | yaml |
| upload-sarif | Upload results as SARIF to GitHub Security tab. When true, output-format is automatically set to sarif | no | false |
| fail-on-error | Fail the workflow if any controls have errors. When false, results are reported but the step always passes | no | false |
Outputs
| name | description |
|---|---|
| results-path | Path to the evaluation results directory |