rivalsecurity/Sha1-Hulud Prevention Scanner
Scan for Sha1-Hulud npm worm using hash-based detection
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| working-directory | Working directory to scan (relative to repo root) | no | . |
| node-version | Node.js version to use for scanning | no | 20 |
| fail-on-detection | Fail the workflow if malicious dependencies are detected | no | true |
| start-point | Where to start the action from (checkout-code, install-node, or scan-deps) | no | checkout-code |
Outputs
no outputs