suatkocar/CodeGraph Security Scan
Scan code for security vulnerabilities using CodeGraph (OWASP Top 10, CWE Top 25, taint analysis)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| directory | Directory to scan (relative to workspace root) | no | . |
| severity | Minimum severity to report (low, medium, high, critical) | no | medium |
| comment-on-pr | Post findings as PR comment | no | true |
Outputs
| name | description |
|---|---|
| total-findings | Total number of security findings |
| critical | Number of critical findings |
| high | Number of high severity findings |
| medium | Number of medium severity findings |
| low | Number of low severity findings |
| owasp-findings | Number of OWASP Top 10 findings |
| cwe-findings | Number of CWE Top 25 findings |