safouanb/keyburn

Secret scanning for your repo (SARIF + CI blocking).

Trust Signals

name	description	required	default
path	Path to scan.	no	.
fail_on	Fail the job if any finding is >= this severity: low\|medium\|high.	no	high
format	Output format: text\|json\|sarif.	no	sarif
sarif_file	Where to write SARIF (when format=sarif).	no	keyburn.sarif
upload_sarif	Upload SARIF to GitHub code scanning (requires security-events:write).	no	true
comment_pr	Post or update a PR comment with a scan summary (pull_request only).	no	false
comment_findings	How many findings to include in the PR comment table.	no	10
comment_file	JSON report path used internally for PR comments.	no	keyburn.findings.json
python_version	Python version to use.	no	3.12

no outputs