PreviewShield/action.yml at main · devUmut35/PreviewShield · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
name: PreviewShield
description: Block security regressions in preview deployments with policy-as-code.
author: devUmut35

branding:
  icon: shield
  color: blue

inputs:
  target:
    description: URL to scan. Mutually exclusive with baseline and preview.
    required: false
    default: ""
  baseline:
    description: Production or known-good URL used by diff mode.
    required: false
    default: ""
  preview:
    description: Preview URL compared with baseline in diff mode.
    required: false
    default: ""
  config:
    description: Path to a PreviewShield YAML policy file.
    required: false
    default: ""
  paths:
    description: Comma-separated or multiline URL paths to inspect.
    required: false
    default: "/"
  fail-on:
    description: Minimum severity that fails the action.
    required: false
    default: high
  format:
    description: Primary report format (json, markdown, or sarif).
    required: false
    default: json
  output:
    description: Primary report path. A format-specific filename is used when omitted.
    required: false
    default: ""
  allow-private:
    description: Allow explicitly requested private or loopback targets. Disabled by default.
    required: false
    default: "false"

outputs:
  report:
    description: Path to the primary report selected by format.
  score:
    description: PreviewShield score for the target or preview.
  grade:
    description: PreviewShield grade for the target or preview.
  passed:
    description: Whether the configured policy threshold passed.

runs:
  using: docker
  image: Dockerfile
  args:
    - --target=${{ inputs.target }}
    - --baseline=${{ inputs.baseline }}
    - --preview=${{ inputs.preview }}
    - --config=${{ inputs.config }}
    - --paths=${{ inputs.paths }}
    - --fail-on=${{ inputs.fail-on }}
    - --format=${{ inputs.format }}
    - --output=${{ inputs.output }}
    - --allow-private=${{ inputs.allow-private }}