savindaj/Node.js CI/CD Wrapper

Automated Node.js setup, build, test, SAST, and DAST pipeline for GitHub Actions

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Stale
License: None

Inputs

name	description	required	default
pipeline-mode	Pipeline stage — full (build + DAST), build (build only), or dast-only (post-deploy DAST scan)	no	full
node-version	Node.js version to install (e.g. 20, 22.x)	no	20
skip-tests	Set to true to skip unit tests	no	false
skip-lint	Set to true to skip code linting	no	false
skip-sast	Set to true to skip SAST static code analysis	no	false
sast-fail-on-findings	Fail the pipeline when SAST finds issues	no	false
sast-report-dir	Directory where SAST reports are written	no	sast-reports
skip-dast	Set to true to skip DAST dynamic application security testing	no	false
dast-target	URL of the running application to scan with OWASP ZAP (e.g. http://localhost:3000)	no	""
dast-start-command	Optional command to start the application before DAST (runs in background)	no	""
dast-start-wait-seconds	Seconds to wait after starting the application before ZAP scans	no	15
dast-fail-on-findings	Fail the pipeline when OWASP ZAP finds alerts	no	false
dast-fail-on-unreachable	Fail the pipeline when the DAST target URL cannot be reached from GitHub Actions	no	false
dast-connect-timeout	Seconds to wait when checking if the DAST target is reachable	no	30
dast-report-dir	Directory where DAST reports are written	no	dast-reports
skip-secrets	Set to true to skip Gitleaks secret scanning	no	false
secrets-fail-on-findings	Fail the pipeline when Gitleaks finds exposed secrets	no	true
secrets-report-dir	Directory where Gitleaks reports are written	no	secrets-reports
secrets-scan-history	Scan full Git history (requires checkout fetch-depth: 0). Set false to scan working tree only	no	true

Outputs

no outputs