wbraynen/Utensil Scan
Scan a repository for dependencies, vulnerabilities, security, compliance, and AI governance.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| license-token | Utensil license token (UTENSIL_LICENSE_TOKEN) | yes | — |
| path | Repository path to scan | no | . |
| fail-on | Fail if findings at or above severity (critical/high/medium/low) | no | — |
| github-comment | Post findings as PR comment | no | true |
| github-token | GitHub token for PR comments | no | ${{ github.token }} |
| full | Run all network-dependent checks (stale deps, license audit) | no | false |
| upload | Upload results to Utensil API for dashboard | no | false |
| upload-url | Ingest endpoint URL | no | https://api.utensil.tools/api/ingest |
| cli-version | CLI version to use (tag name or "latest") | no | latest |
| args | Additional CLI arguments (pass-through) | no | — |
Outputs
| name | description |
|---|---|
| exit-code | CLI exit code (0 = pass, 2 = threshold exceeded) |
| report-json | Path to the JSON report file |
| vuln-count | Total vulnerability count |
| finding-count | Total security finding count |