richonn/ShieldCI — DevSecOps Pipeline Generator
Auto-generates hardened CI/CD DevSecOps pipelines and opens a PR
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token (PAT with repo + workflow scopes) for creating branches and PRs | yes | — |
| language | Language override: node|python|java|go|auto | no | auto |
| docker | Docker detection: true|false|auto | no | auto |
| kubernetes | Include K8s deploy workflow | no | false |
| enable-trivy | Add Trivy image scan job | no | true |
| enable-gitleaks | Add Gitleaks secret scan job | no | true |
| enable-sast | Add SAST job | no | true |
| sast-tool | SAST tool: codeql|semgrep | no | codeql |
| branch-name | Branch to push generated workflows to | no | shieldci/generated-workflows |
| pr-title | Title for the created PR | no | [ShieldCI] Add CI/CD DevSecOps pipeline |
| dry-run | If true, print generated workflows to the Job Summary without creating a branch or PR | no | false |
| max-depth | Max directory depth for monorepo component detection | no | 3 |
Outputs
| name | description |
|---|---|
| pr-url | URL of the created pull request |
| detected-stack | Detected stack as JSON |
| generated-files | Comma-separated list of generated file paths |