schubergphilis/mcvs-golang-action
The Mission Critical Vulnerability Scanner (MCVS) Golang action.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| build-tags | What kind of code should be checked, e.g. component, e2e | — | — |
| code-coverage-expected | The minimum code coverage. | — | 80 |
| code-coverage-opa-expected | The minimum OPA code coverage. | — | 80 |
| code-coverage-timeout | The duration before calculating the code-coverage times out. | — | — |
| github-token-for-downloading-private-go-modules | Whether private go modules have to be downloaded. | — | — |
| go-version-file | The Path to the go.mod or go.work file. | — | go.mod |
| golang-unit-tests-exclusions | The Golang paths that should be excluded from unit testing. | — | "" |
| golangci-timeout | The duration before golangci-lint times out. If <= 0, then the timeout is disabled. | — | — |
| grype-version | The grype version to be used by the anchore/scan-action. | — | — |
| gta-base-branch | The base branch to compare changed code to. | — | main |
| gta-partial-testing | Whether partial testing should be performed. Only changed packages will be tested. | — | false |
| release-application-name | The name of the application that has to be released. | — | — |
| release-architecture | The architecture of the release, e.g. amd64, arm64, etc. | — | — |
| release-build-tags | The build tags that have to be used when building the release. e.g. for \ AWS Lambda, the tag lambda.norpc is used. | — | — |
| release-dir | The directory of the main.go file to be compiled and released. | — | — |
| release-os | The OS of the main.go file to be compiled and released. | — | linux |
| release-type | The type of the release, e.g. binary, zip, etc. | — | — |
| task-install | Whether Task should be installed. | — | no |
| task-version | The Task version that has to be installed and used. | — | 3.51.1 |
| test-timeout | The duration before a test times out. Note: this setting can be used for various types of testing, such as unit, integration, etc. | — | — |
| testing-type | The testing type, e.g. integration, unit or some other. | — | — |
| token | A token could be used to pull private golang modules. | — | — |
Outputs
no outputs