scovetta/Aldur Binary Scanner
Binary security analyzer for PE, ELF, and Mach-O binaries
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| targets | Files, directories, or glob patterns to analyze (space-separated) | yes | — |
| output | Output file path for results (SARIF format by default) | no | aldur-results.sarif |
| format | Output format: sarif, text, text-color, or github-actions | no | sarif |
| annotations | Show results as GitHub Actions annotations (errors/warnings in PR) | no | true |
| recurse | Recurse into subdirectories | no | true |
| show-passed | Include passing rules in output | no | false |
| level | Minimum failure level to report (error, warning, note) | no | "" |
| scan-archives | Scan binaries inside archives (ZIP, TAR, APK, IPA, MSIX, etc.) | no | true |
| version | Version of Aldur to use (defaults to latest) | no | latest |
| upload-sarif | Upload SARIF results to GitHub Code Scanning | no | true |
| fail-on-error | Fail the workflow if errors are found | no | true |
| binary-path | Path to a local aldur binary (for development/testing, skips download) | no | "" |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF file |
| errors | Number of errors found |
| warnings | Number of warnings found |
| files-analyzed | Number of files analyzed |