Skip to content

Commit 12b78ed

Browse files
committed
Updated readme
1 parent 04c1522 commit 12b78ed

3 files changed

Lines changed: 34 additions & 5 deletions

File tree

.gitignore

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,5 +19,4 @@ markdown_security_temp.md
1919
*.pyc
2020
test.py
2121
*.cpython-312.pyc`
22-
file_generator.py
23-
*.md
22+
file_generator.py

README.md

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
# Security Tools Scanning
2+
3+
The purpose of this action is to run various security tools, process their output, and then comment the results on a PR. It is expected to only run this on PRs
4+
5+
## Example Usage
6+
7+
```yaml
8+
name: Security Scan Workflow
9+
10+
on:
11+
pull_request:
12+
[opened, synchronize]
13+
14+
jobs:
15+
security-scan:
16+
runs-on: ubuntu-latest
17+
permissions:
18+
pull-requests: write # Set required permissions here
19+
20+
steps:
21+
- name: Checkout code
22+
uses: actions/checkout@v2
23+
24+
- name: Run Security Scan and Comment Action
25+
uses: dacoburn/security-tools@v1.0.1
26+
with:
27+
github_token: ${{ secrets.GITHUB_TOKEN }}
28+
trufflehog_exclude_dir: "node_modules/*,vendor,.git/*"
29+
bandit_exclude_dir: "tests,migrations,tests,test,.venv,venv"
30+
bandit_rules: "B101,B102,B105,B106,B107,B110,B603,B605,B607"
31+
gosec_rules: "critical,high,medium"
32+
trivy_exclude_dir: "/path/to/ignore"
33+
```

action.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -50,9 +50,6 @@ inputs:
5050
required: false
5151
default: ""
5252

53-
permissions:
54-
pull-requests: write
55-
5653
branding:
5754
icon: "shield"
5855
color: "blue"

0 commit comments

Comments
 (0)