sebrandon1/TLS Config Lint
Lint TLS configurations for security anti-patterns across Go, Python, Node.js/TypeScript, C++, Java, and Rust projects
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| severity-threshold | Minimum severity to cause failure: critical, high, medium, info | no | high |
| languages | Comma-separated languages to scan: go,python,nodejs,cpp,java,rust or auto to detect | no | auto |
| exclude-dirs | Additional directories to exclude (comma-separated) | no | "" |
| exclude-patterns | Pattern IDs to suppress (comma-separated) | no | "" |
| config-file | Path to optional repo config file | no | .tls-config-lint.yml |
| scan-path | Directory to scan | no | . |
| fail-on-findings | Whether to fail CI on findings above threshold | no | true |
| sarif-output | Path to write SARIF file (empty = disabled) | no | "" |
| report-output | Path to write CSV or JSON report (format inferred from extension, empty = disabled) | no | "" |
| debug | Show which regex matched for each finding (helps diagnose false positives) | no | false |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| critical-count | Number of critical findings |
| high-count | Number of high findings |
| medium-count | Number of medium findings |
| info-count | Number of info findings |
| sarif-file | Path to SARIF file (if generated) |
| report-file | Path to report file (if generated) |
| scan-duration | Scan duration (e.g. 3s) |