scribe-security/Vulnerability Management Scan
Wraps the vulnmng CLI for security scanning and reporting
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| command | Command to run (scan or report) | yes | scan |
| target | Target to scan (path or image) | no | — |
| target-name | Human-readable name for the scan target | no | — |
| json-path | Path to the issues JSON file | no | issues.json |
| format-md | Path to generate Markdown report (report command only) | no | — |
| format-csv | Path to generate CSV report (report command only) | no | — |
| git-root | Path to Git repository root for integration | no | — |
| git-branch | Git branch to use | no | — |
| git-token | GitHub token for authentication | no | — |
| fail-on | Fail if any vulnerability with this severity or higher is found (None, Low, Medium, High, Critical). Default: None - never fail. Excludes vulnerabilities marked as fixed, false-positive, not-exploitable, or ignored. | no | None |
| enrichment | Comma-separated list of enrichment sources to apply (e.g., "cisa"). Use "none" to disable enrichment. Default: none | no | none |
| log-level | Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL). Default: WARNING. Use DEBUG for troubleshooting. | no | WARNING |
| git-force-push | Force push to remote repository (use with caution). Set to "true" to enable. | no | false |
| extra-args | Additional raw CLI arguments | no | — |
Outputs
| name | description |
|---|---|
| json-path | Path to the generated or updated issues JSON file |
| report-md | Path to the generated Markdown report |
| report-csv | Path to the generated CSV report |