tolugit/CredScan
Scan a repository for hard-coded credentials and secrets, with SARIF output for GitHub code scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan. | no | . |
| output | Comma-separated output formats (console, json, sarif, html, csv). | no | sarif |
| output-dir | Directory for report files. | no | credscan-reports |
| min-confidence | Minimum confidence (0.0-1.0) to report a finding. | no | 0.5 |
| exclude | Comma-separated path patterns to skip. | no | .git/,node_modules/,*.pyc |
| fail-on-findings | Fail the job (exit 1) if any credentials are found. | no | true |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF report (if sarif output was requested). |