ghasec-action

A GitHub Action to run ghasec, a security linter for GitHub Actions workflows.

Usage

- uses: koki-develop/ghasec-action@v1.1.1

Inputs

Name	Description	Default
version	Version of ghasec to install (e.g. X.Y.Z, vX.Y.Z, or latest)	latest
github-token	GitHub token for API requests (to avoid rate limiting)	${{ github.token }}
online	Enable rules that require network access	false
install-shellcheck	Install ShellCheck so the shellcheck rule can run	true
args	Additional arguments to pass to ghasec

Example

name: ghasec

on:
  pull_request:
  push:
    branches: [main]

jobs:
  ghasec:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: koki-develop/ghasec-action@v1.1.1

License

MIT