vulncheck-oss/VulnCheck Action
Integrate VulnCheck into your GitHub Actions workflow
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | The GitHub token used to create an authenticated client | no | ${{ github.token }} |
| token | VulnCheck Token | yes | — |
| command | Command to run | — | scan |
| scan-path | Path to scan | no | ./ |
| scan-cvss-base-threshold | CVSS Threshold to fail the workflow | no | — |
| scan-cvss-temporal-threshold | CVSS Temporal Threshold to fail the workflow | no | — |
| scan-cve-details | Include an annotation for every found CVE showing package type, cataloger, and locations | no | — |
| scan-cve-npm-rel | Attempt to use npm to trace CVE package to its owner | no | — |
| disable-pr-comment | When set to "true", skip posting the scan result as a pull request comment. Useful for self-tests and demos. | no | — |
Outputs
| name | description |
|---|---|
| scan-output | Output results if a scan is run |
| scan-count | Output count of vulnerabilities if a scan is run |
| scan-signature | SHA256 hash of the scan results (used to detect change) |