swacky1/Pentry — Security tests for your app

Pen-test your running app in CI — OWASP-style checks that fail the build, with evidence and a fix.

Trust Signals

name	description	required	default
target	Base URL of the running app to scan (e.g. http://localhost:3000).	yes	—
fail-on	Minimum severity that fails the run: info\|low\|medium\|high\|critical.	no	high
routes	Comma-separated routes to test (e.g. /,/api/users).	no	""
format	Report format: console\|json\|sarif\|junit\|markdown\|html.	no	console
output	Write the report to this file instead of stdout.	no	""
config	Path to a pentry config file.	no	""
baseline	Path to a baseline file; only new findings fail.	no	""
version	Version of @red_official/pentry to run.	no	latest

no outputs