vigilant-llc/Runner Guard
Scan GitHub Actions workflows for CI/CD security vulnerabilities including expression injection, unpinned actions, secret exposure, and AI config attacks. Uploads SARIF results to GitHub Code Scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Runner Guard version to install (e.g. "v0.2.0"). Defaults to latest. | — | latest |
| fail-on | Minimum severity to fail the check (low, medium, high, critical) | — | high |
| sarif-upload | Upload SARIF results to GitHub Code Scanning | — | true |
| rules | Run only specific rules (comma-separated, e.g. "RGS-002,RGS-007") | — | "" |
| group | Run only rules in specific groups (comma-separated, e.g. "injection,supply-chain") | — | "" |
Outputs
no outputs