stackradar/StackRadar
Upload dependency evidence to StackRadar from GitHub Actions
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| cli-version | StackRadar CLI version to download. Use latest or a tag such as v0.1.0. | no | latest |
| mode | Operation to run. Supported values are bundle-and-upload, bundle, and upload. | no | bundle-and-upload |
| path | Repository path to scan when bundling. | no | . |
| api-url | StackRadar app/API base URL. | no | https://stackradar.com |
| oidc-audience | GitHub Actions OIDC audience expected by StackRadar. | no | stackradar.com |
| token | Upload token override. Prefer GitHub OIDC for GitHub Actions. | no | — |
| bundle-path | Bundle output path for bundle modes, or existing bundle path for upload mode. | no | — |
| dry-run | Call stackradar upload --dry-run instead of uploading. | no | false |
| fail-on-error | Fail the workflow on bundle or upload errors. | no | true |
| verify | CLI verification mode. Supported values are strict, checksum, and false. | no | strict |
| exclude | Newline-separated glob patterns to exclude from CLI discovery. | no | — |
Outputs
| name | description |
|---|---|
| cli-version | Resolved StackRadar CLI version. |
| cli-path | Installed StackRadar CLI path. |
| bundle-path | Created or uploaded bundle path. |
| bundle-sha256 | SHA-256 digest of the bundle. |
| upload-id | StackRadar upload/run ID, when uploaded. |
| artifact-id | StackRadar upload artifact ID, when uploaded. |
| status | Final action status. |