svemulapati/CredVigil Secret Scan
Scan a repository for exposed credentials with CredVigil. Emits SARIF for GitHub Code Scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | File or directory to scan. | no | . |
| format | Output format: text, json, or sarif. | no | sarif |
| output | Write output to this file (recommended for sarif). | no | credvigil.sarif |
| args | Extra arguments passed verbatim to `credvigil scan`. | no | "" |
| fail-on-findings | Fail the job when secrets are found (true/false). | no | true |
| scan-git-history | Scan full git history instead of the working tree (true/false). | no | false |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF report. |