| halt_on_error | Stop the pipeline if an error is encountered as opposed to a policy failure | no | true |
| policies | List of policies separated by comma (e.g., copyleft, undeclared, dt) | no | — |
| policies.halt_on_failure | Halt if a check fails | no | true |
| api.key | SCANOSS API Key token (optional - not required for default OSSKB URL) | no | — |
| api.url | SCANOSS API URL (optional - default: https://api.osskb.org/scan/direct) | no | — |
| dependencies.enabled | Scan dependencies (optional - default false) | no | false |
| dependencies.scope | Gets development or production dependencies (scopes - prod|dev) | no | "" |
| dependencies.scope.include | Custom list of dependency scopes to be included. Provide scopes as a comma-separated list. | no | "" |
| dependencies.scope.exclude | Custom list of dependency scopes to be excluded. Provide scopes as a comma-separated list. | no | "" |
| output.filepath | Scanner results filepath | no | scanoss-raw.json |
| github.token | Your GitHub token | no | ${{ github.token }} |
| licenses.copyleft.include | List of Copyleft licenses to append to the default list. Provide licenses as a comma-separated list. | no | — |
| licenses.copyleft.exclude | List of Copyleft licenses to remove from default list. Provide licenses as a comma-separated list. | no | — |
| licenses.copyleft.explicit | Explicit list of Copyleft licenses to consider. Provide licenses as a comma-separated list. | no | — |
| runtimeContainer | Specify runtime container to perform the scan. | no | ghcr.io/scanoss/scanoss-py:v1.52.1 |
| skipSnippets | Skip the generation of snippets. | no | false |
| scanFiles | Enable or disable file and snippet scanning. | no | true |
| scanossSettings | Settings file to use for scanning. | no | true |
| settingsFilepath | SCANOSS settings file path. | no | scanoss.json |
| scanMode | Delta (diff) or full scan | no | full |
| scanPath | Relative path within the repository to scan (e.g., "src" or "packages/api"). Must be relative, no parent directory references (..) allowed. | no | . |
| debug | Enable debugging on scanoss.py | no | false |
| deptrack.upload | Enable Dependency Track upload | no | false |
| deptrack.url | Dependency Track base URL | no | — |
| deptrack.apikey | Dependency Track API key | no | — |
| deptrack.projectid | Dependency Track project UUID | no | — |
| deptrack.projectname | Dependency Track project name | no | — |
| deptrack.projectversion | Dependency Track project version | no | — |
| matchAnnotations | Enable or disable match annotations | no | true |