| deptrack_enable | Enables Dependency Track check | yes | true |
| deptrack_url | URL of OWASP Dependency Track REST API. Required if Dependency Track is enabled. | no | ${{ secrets.SECRET_OWASP_DT_URL }} |
| deptrack_key | Key to access OWASP Dependency Track REST API. Required if Dependency Track is enabled. | no | ${{ secrets.SECRET_OWASP_DT_KEY }} |
| deptrack_language | Programming language. Required if Dependency Track is enabled. | no | nodejs |
| code_enable | Enables SonarQube check | yes | true |
| sonar_source | SonarQube source. Required to run SonarQube. | no | . |
| sonar_host | SonarQube host. Required to run SonarQube. | no | ${{ secrets.SONAR_HOST_URL }} |
| sonar_login | SonarQube login key. Required to run SonarQube. | no | ${{ secrets.SONAR_TOKEN }} |
| config_enable | Enables configuration check. | yes | true |
| secrets_enable | Enables secrets check | yes | true |
| reviewdog_github_token | GitHub token. Required if config checker is enabled. | no | ${{ github.token }} |
| reviewdog_working_directory | Directory to run the action on, from the repo root.. Default is . ( root of the repository). Required if config checker is enabled. | no | . |
| reviewdog_level | Report level for reviewdog [info,warning,error]. Required if config checker is enabled. | no | error |
| reviewdog_reporter | Reporter of reviewdog command [github-pr-check,github-pr-review]. Default is github-pr-check.. Required if config checker is enabled. | no | github-pr-check |
| reviewdog_fail_on_error | Exit code for reviewdog when errors are found [true,false]. Default is `false`. Required if config checker is enabled. | no | false |
| depcheck_project | Dependency check project. Required if code checker is enabled. | no | <PROJECT> |
| depcheck_path | Dependency check path. Required if code checker is enabled. | no | . |
| depcheck_format | Dependency check format. Required if code checker is enabled. | no | HTML |
| trivy_config_scan-ref | Config scan reference. Required if config checker is enabled. | no | . |
| trivy_config_severity | Severities of vulnerabilities to be displayed. Required if config checker is enabled. | no | UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL |
| trivy_repo_scan-ref | FS scan reference. Required if config checker is enabled. | no | . |
| trivy_repo_ignore-unfixed | Ignore unfixed vulnerabilities. Required if config checker is enabled. | no | false |
| trivy_repo_severity | Severities of vulnerabilities to be displayed. Required if config checker is enabled. | no | UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL |
| trivy_repo_vuln | comma-separated list of vulnerability types (os,library). Required if config checker is enabled. | no | os,library |
| trivy_timeout | Trivy timeout duration. Required if config checker is enabled. | no | 5m |