starhaven-io/pinprick-action
Audit your GitHub Actions supply chain security with pinprick
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | pinprick version to install. Defaults to "0.22.0", the version this action release pins, so pinned runs stay deterministic. Use "latest" for the newest release, or an exact version like "v0.22.0". | no | 0.22.0 |
| path | Repository path to scan. | no | . |
| advanced-security | Upload SARIF results to GitHub code scanning. | no | true |
| fail-on-findings | Fail the workflow when pinprick reports findings. | no | false |
Outputs
| name | description |
|---|---|
| exit-code | pinprick audit exit code. |
| sarif-file | Filepath to pinprick SARIF results when advanced-security is enabled. |