sett-and-hive/sarif-to-issue-action
Run @security-alert/sarif-to-issue to post the content of a SARIF file to a GitHub issue.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| sarif-file | Path to SARIF file to add to issue text. Must be a relative path (e.g., ./scan/results/findings.sarif). Do not use github.workspace as a prefix. | yes | — |
| token | GitHub Access Token | yes | — |
| repository | GitHub repository as org/repo. | yes | — |
| branch | The branch for the pull request. | yes | — |
| title | The title of the issue | no | SARIF vulnerabilities report |
| labels | Label for the issue | no | security |
| dry-run | Add "true" flag here for dry run mode. For testing. | no | false |
| odc-sarif | SARIF file is in OWASP Dependency Check dialect. | no | false |
Outputs
| name | description |
|---|---|
| output | The output of the docker run. |