suvenseo/secure-review-action
Security-focused code review for pull requests using deterministic checks, dependency audit, Semgrep, and SARIF.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token used to read PR metadata and publish comments. | no | ${{ github.token }} |
| max-findings | Maximum findings to publish or write. | no | 25 |
| fail-on-high | Fail the workflow when high or critical findings are present. | no | false |
| dry-run | Run analyzers and write artifacts without publishing PR comments. | no | false |
| target-path | Path to scan for local/demo dry runs when no pull request diff is available. | no | . |
| output-json | Path for structured JSON output. | no | secure-review-findings.json |
| output-sarif | Path for SARIF output. | no | secure-review-results.sarif |
Outputs
| name | description |
|---|---|
| findings-count | Total number of normalized findings. |
| high-count | Number of high or critical findings. |
| json-path | Structured findings JSON path. |
| sarif-path | SARIF output path. |