sett-and-hive/sarif-to-comment-action
Run @security-alert/sarif-to-comment to post the content of a SARIF file to a GitHub pull request.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| sarif-file | Path to SARIF file to add to pull request comment | yes | — |
| token | GitHub Access Token | yes | — |
| repository | GitHub repository as org/repo. | yes | — |
| branch | The branch for the pull request. | yes | — |
| pr-number | The number for the pull request. | yes | — |
| title | The title of the issue | no | SARIF vulnerabilities report |
| show-rule-details | Flag to show or hide rule details. | no | true |
| dry-run | Add "true" flag here for dry run mode. For testing. | no | false |
| odc-sarif | SARIF file is in OWASP Dependency Check dialect. | no | false |
| simple | Simplify the output to only give findings grouped by rule. | no | false |
Outputs
| name | description |
|---|---|
| output | The output of the docker run. |