sks/CCE cloud entitlements scan
Run CCE from ghcr.io/stackgenhq/cce — scan, custom lenses, recipe packs, optional diff gate.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | CCE image tag (without a leading v), e.g. 0.0.5 or latest | no | 0.0.5 |
| image | Full container image reference (overrides version), e.g. ghcr.io/stackgenhq/cce:0.0.5 | no | "" |
| mode | scan (default cce scan) or run (cce run -pack / -recipes) | no | scan |
| folder | Directory to scan | no | . |
| language | Source language: GO, JAVA, AUTO, ... | no | GO |
| filter | Entitlement filter for scan mode: all or cloud | no | cloud |
| format | Report format for scan mode: json, text, or sarif | no | json |
| mapper-file | Scan mode — custom lens YAML path or HTTPS URL (-mapper-file) | no | "" |
| pack | Run mode — recipe pack id (e.g. modernization-pack) | no | "" |
| recipes | Run mode — comma-separated recipe ids (alternative to pack) | no | "" |
| remote | Run mode — load catalog from releases.stackgen.com (-remote) | no | false |
| catalog-url | Run mode — override catalog.json URL (enterprise self-host) | no | "" |
| packs-url | Run mode — override packs.json URL (enterprise self-host) | no | "" |
| output | Path for the scan report file | no | cce-report.json |
| baseline | Baseline JSON report for cce diff (skip diff when empty) | no | "" |
| fail-on-new | Fail the step when diff finds new entitlements (requires baseline) | no | true |
| policy | Optional YAML governance policy for cce diff | no | "" |
| diff-output | Path for diff JSON output (only when baseline is set) | no | cce-diff.json |
| upload-artifact | Upload the scan report (and diff, if any) as workflow artifacts | no | true |
| artifact-name | Artifact name when upload-artifact is true | no | cce-entitlements |
Outputs
| name | description |
|---|---|
| report-path | Path to the generated entitlement report |
| entitlement-count | Total entitlements in the scan report (json format only) |
| diff-path | Path to the diff report when baseline was provided |