wehub-resource-sync
0d3cb498a3
Deploy local.promptfoo.app / Deploy to Cloudflare Pages (push) Waiting to run
Test and Publish Multi-arch Docker Image / test (push) Waiting to run
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-amd64 platform:linux/amd64 runner:ubuntu-latest]) (push) Blocked by required conditions
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-arm64 platform:linux/arm64 runner:ubuntu-24.04-arm]) (push) Blocked by required conditions
Test and Publish Multi-arch Docker Image / merge-docker-digests (push) Blocked by required conditions
Test and Publish Multi-arch Docker Image / Attest Multi-arch Image (push) Blocked by required conditions
Validate Renovate Config / Validate Renovate Configuration (push) Waiting to run
CI / Shell Format Check (push) Has been cancelled
CI / Check Ruby (3.4) (push) Has been cancelled
CI / CI Config (push) Has been cancelled
CI / Test on Node ${{ matrix.node }} and ${{ matrix.os }}${{ matrix.shard && format(' (shard {0}/3)', matrix.shard) || '' }} (push) Has been cancelled
CI / Build on Node ${{ matrix.node }} (push) Has been cancelled
CI / Style Check (push) Has been cancelled
CI / Generate Assets (push) Has been cancelled
CI / Check Python (3.14) (push) Has been cancelled
CI / Check Python (3.9) (push) Has been cancelled
CI / Build Docs (push) Has been cancelled
CI / Code Scan Action (push) Has been cancelled
CI / Site tests (push) Has been cancelled
CI / webui tests (push) Has been cancelled
CI / Run Integration Tests (push) Has been cancelled
CI / Run Smoke Tests (push) Has been cancelled
CI / Go Tests (push) Has been cancelled
CI / Share Test (push) Has been cancelled
CI / Redteam (Production API) (push) Has been cancelled
CI / Redteam (Staging API) (push) Has been cancelled
CI / GitHub Actions Lint (push) Has been cancelled
CI / Check Ruby (3.0) (push) Has been cancelled
release-please / release-please (push) Has been cancelled
release-please / build (push) Has been cancelled
release-please / publish-npm (push) Has been cancelled
release-please / publish-npm-backfill (push) Has been cancelled
release-please / docker (push) Has been cancelled
release-please / publish-code-scan-action (push) Has been cancelled
release-please / attest-code-scan-action (push) Has been cancelled
51 lines
1.6 KiB
YAML
51 lines
1.6 KiB
YAML
name: 'Promptfoo Code Scan'
|
|
description: 'Scan pull requests for LLM security vulnerabilities'
|
|
author: 'Promptfoo, Inc.'
|
|
|
|
branding:
|
|
icon: 'shield'
|
|
color: 'blue'
|
|
|
|
inputs:
|
|
api-host:
|
|
description: 'Promptfoo API host url'
|
|
required: false
|
|
default: https://api.promptfoo.app
|
|
min-severity:
|
|
description: 'Minimum severity level to report (low|medium|high|critical). Defaults to medium when neither min-severity nor minimum-severity is set.'
|
|
required: false
|
|
minimum-severity:
|
|
description: 'Alias for min-severity (low|medium|high|critical). Has no default; takes effect only when min-severity is not set.'
|
|
required: false
|
|
config-path:
|
|
description: 'Path to YAML configuration file'
|
|
required: false
|
|
guidance:
|
|
description: 'Custom guidance for the security scan'
|
|
required: false
|
|
guidance-file:
|
|
description: 'Path to file containing custom guidance'
|
|
required: false
|
|
github-token:
|
|
description: 'GitHub token for authentication (default: github.token)'
|
|
required: false
|
|
default: ${{ github.token }}
|
|
enable-fork-prs:
|
|
description: 'Enable scanning PRs from forked repositories'
|
|
required: false
|
|
default: 'false'
|
|
promptfoo-version:
|
|
description: 'Exact promptfoo CLI version to install for scanning (e.g. 0.121.0). Defaults to the version pinned when this action release was built.'
|
|
required: false
|
|
sarif-output-path:
|
|
description: 'Optional path to write SARIF output for upload to GitHub Code Scanning'
|
|
required: false
|
|
|
|
outputs:
|
|
sarif-path:
|
|
description: 'Path to the SARIF file when a scan completes and sarif-output-path is configured'
|
|
|
|
runs:
|
|
using: 'node24'
|
|
main: 'dist/index.js'
|