velka 1.4.0

The Code Sin Judge - AST-powered secret scanner and security analyzer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

name: "Velka Security Scan"
description: "Run Velka secret scanner on your repository"
branding:
  icon: "shield"
  color: "red"

inputs:
  path:
    description: "Path to scan (default: repository root)"
    required: false
    default: "."
  fail-on-secrets:
    description: "Fail the step if mortal sins are found"
    required: false
    default: "true"
  format:
    description: "Output format (terminal, json, csv, junit, sarif, markdown, html)"
    required: false
    default: "terminal"
  mortal-only:
    description: "Only report mortal (critical) sins"
    required: false
    default: "false"

outputs:
  exit-code:
    description: "Exit code from velka (0 = clean, 1 = sins found)"
  has-sins:
    description: "Whether any sins were found (true/false)"

runs:
  using: "composite"
  steps:
    - name: Install Rust
      uses: dtolnay/rust-toolchain@stable
      with:
        components: rustfmt

    - name: Install Velka
      run: cargo install velka --locked
      shell: bash

    - name: Run Velka
      id: velka
      run: |
        set +e
        velka scan ${{ inputs.path }} --format ${{ inputs.format }} ${{ inputs.mortal-only == 'true' && '--mortal-only' || '' }}
        code=$?
        if [ $code -eq 0 ]; then
          echo "exit-code=0" >> "$GITHUB_OUTPUT"
          echo "has-sins=false" >> "$GITHUB_OUTPUT"
        else
          echo "exit-code=$code" >> "$GITHUB_OUTPUT"
          echo "has-sins=true" >> "$GITHUB_OUTPUT"
          if [ "${{ inputs.fail-on-secrets }}" = "true" ]; then
            exit $code
          fi
        fi
      shell: bash