yakohhhh/Portcullis security scan
Audit a self-hosted stack's docker-compose exposure and foot-guns, publish a report to the job summary, and fail the job above a severity threshold.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (a compose file or a directory tree). | no | . |
| fail-on | Fail the job if any finding is at or above this severity (critical | high | medium | low | info | never). | no | high |
| min-severity | Hide findings below this severity in the report. | no | info |
| trivy | Run Trivy too, when the binary is available (true | false). | no | false |
| comment-on-pr | Post the report as a pull-request comment (true | false). Requires the job to grant `pull-requests: write`. | no | false |
| python-version | Python version used to run Portcullis. | no | 3.12 |
Outputs
| name | description |
|---|---|
| grade | Overall grade, A-F. |
| score | Overall score, 0-100. |