sarthak-47/Argus Security Scan
AI-powered security audit — static analysis with SARIF output for GitHub code scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | Path or repo URL to scan. | no | . |
| fail-on | Fail the job if a finding at/above this severity exists (critical|high|medium|low). Empty = never fail. | no | "" |
| policy | Path to a policy file (.argus-policy.toml) for per-rule CI gating. Overrides fail-on. Empty = auto-detect one in the target dir. | no | "" |
| diff-base | Only report findings in files changed vs this git ref (e.g. the PR base branch). Empty = scan everything. | no | "" |
| baseline | Path to a committed baseline file (from `argus scan --write-baseline`). Only findings absent from it are reported/gated. Empty = report all. | no | "" |
| format | Report format to produce (sarif|json|html|markdown). | no | sarif |
| pr-comments | Post new findings as inline GitHub PR review comments, in addition to the SARIF upload. Needs `pull-requests: write` permission on the calling job. A no-op outside a pull_request event, so it's safe to leave on for every trigger. | no | false |
| version | Argus version/ref to install (PyPI version, or a git ref). Default: latest from PyPI. | no | "" |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF file. |