strobes-co/Strobes Security Assessment
Run a Strobes AI security assessment in your CI/CD pipeline
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| base-url | Strobes deployment base URL (e.g. https://app.strobes.co) | yes | — |
| org-id | Strobes organization UUID | yes | — |
| master-key | Strobes master API key | yes | — |
| workflow-file | Path to a local workflow YAML file to run (mutually exclusive with message) | no | "" |
| message | One-shot assessment prompt sent via `strobes send` (used when workflow-file is not set) | no | "" |
| workspace | Existing workspace UUID to run the assessment in | no | "" |
| vars | Workflow variables as newline-separated KEY=VALUE pairs | no | "" |
| var-file | Path to a JSON file of workflow variables ({"KEY": "VALUE"}) | no | "" |
| fail-on-findings | Fail the job if findings at or above this severity exist (critical, high, medium, low) | no | "" |
| timeout | Maximum seconds to wait for the assessment to complete (0 = no limit) | no | 3600 |
| output-format | Output format: text, json, or sarif (sarif also uploads to GitHub Code Scanning) | no | text |
| upload-sarif | Upload SARIF results to GitHub Code Scanning (requires output-format: sarif and workspace set) | no | false |
| version | strobes CLI version to install, e.g. v0.6.0 (default: latest) | no | latest |
Outputs
| name | description |
|---|---|
| thread-id | The Strobes thread ID created for this assessment run |
| workspace-id | The Strobes workspace ID used for this assessment |