thedave42/CodeQL OWASP ASVS Coverage Check
Displays the ASVS coverage from the tests run with CodeQL
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| repo-token | REQUIRED: The GITHUB_TOKEN secret. Make sure this token has rights to all the repos you want to catalog. | yes | — |
| org-name | The name of the owner/organization that contains the repositories (defaults to current repository owner) | yes | ${{ github.repository_owner }} |
| repo-names | REQUIRED: A comma separated list of repository names to catalog. | yes | — |
| depth | The depth of transitive dependencies to report on. Defaults to 0, which will not include transitives (i.e. it will only list packages from manifests found in the repo). Higher numbers will include transitive dependencies by including the manifests from the included packages' repos as well, but can significantly increase scan time. | yes | 0 |
Outputs
no outputs