turothereal/repo-analyzer
Thin DevSecOps gate: runs Trivy, Checkov, gitleaks, grype, hadolint, zizmor and actionlint, scores the result, and fails CI on findings.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | Path to scan. | no | . |
| fail-on | Comma-separated severities that fail the gate (e.g. critical,high). Defaults to the config or critical,high. | no | "" |
| format | Comma-separated report formats among sarif,markdown,html,json. | no | "" |
| output-dir | Directory for the generated reports. | no | repo-analyzer-report |
| config | Path to a .repo-analyzer.yml (defaults to <target>/.repo-analyzer.yml). | no | "" |
| no-gate | Set to 'true' to scan and report without ever failing the job. | no | false |
Outputs
no outputs