ymlsurgeon/Ex-Ray
Static analysis scanner for malicious patterns in developer tooling configurations (npm scripts, VS Code tasks)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scan_path | Path to scan (defaults to repo root) | no | . |
| webhook_url | URL to POST SARIF results to (e.g., Sumo Logic HTTP source URL) | no | — |
| tenant_id | Customer/tenant identifier for MDR routing. Injected into SARIF properties and webhook X-Tenant-ID header. | no | — |
| severity_threshold | Minimum severity to report: low, medium, high, or critical | no | low |
| format | Output format: sarif, json, or text | no | sarif |
| fail_on_findings | Exit with code 1 if any findings are detected at or above severity_threshold (true/false) | no | false |
| webhook_format | Webhook payload format: ndjson (one line per finding, default) or sarif (full blob) | no | ndjson |
| actor | User who triggered the scan (auto-populated from github.actor if not set) | no | — |
| pr_author | User who created the pull request or commit | no | — |
Outputs
| name | description |
|---|---|
| findings_count | Total number of findings at or above severity_threshold |
| critical_count | Number of CRITICAL findings |
| sarif_file | Path to the SARIF output file (only set when format is sarif) |
| files_scanned | Number of files examined during the scan |