teomach/Lybica Security Scan
Run Lybica's pluggable OSS security scanners (SAST/Secrets/SBOM/SCA/IaC/DAST) as Lybica-labelled stages and ship findings to DefectDojo -> SVM. Scanners are defined in scanners.yaml (the plugin contract) — add one by editing the registry, no code change. Findings POST to the public DefectDojo (DEFECTDOJO_URL, e.g. https://app.lybica.com) over the internet — no Tailscale required.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| product | DefectDojo product name (e.g. 'Cenefits Staging'). | yes | — |
| engagement | DefectDojo engagement (auto-created). | yes | — |
| target | Path to scan for code scanners. | no | . |
| dast-target | URL to scan for DAST (empty = skip DAST). | no | "" |
| component | component: label applied to findings. | no | app |
| scanners | Optional CSV subset of scanner names (default: all enabled). | no | "" |
| branch | Source branch; tagged on import. | no | "" |
| commit | Commit SHA; tagged on import. | no | "" |
| python-version | — | no | 3.11 |
Outputs
no outputs