topicusonderwijs/NPM security action
Github action to verify NPM security with different tools
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| node-version | Node.js version to use | no | 24 |
| package-manager | Package manager (npm, yarn, pnpm) | no | npm |
| severity-threshold | Minimum severity level to report (low, moderate, high, critical) | no | moderate |
| working-directory | Working directory for the scan | no | . |
| enable-pr-comments | Enable automatic PR comments | no | true |
| socket-token | Socket Security API token | no | "" |
| snyk-token | Snyk API token | no | "" |
Outputs
| name | description |
|---|---|
| vulnerabilities-found | Whether vulnerabilities were found |
| scan-summary | Summary of scan results |