Quantum Viper Security Scanner
Version updated for https://github.com/quantumtiger-morningbay/Quantum-Viper to version v4.0.0.
- This action is used across all versions by ? repositories.
Action Type
This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
Quantum Viper is a GitHub Action designed to automate security scanning within CI/CD pipelines. It supports various scan types, including static analysis, software composition analysis (SCA), secrets detection, and infrastructure-as-code (IaC) scanning, helping developers identify vulnerabilities, misconfigurations, and security risks early in the development lifecycle. The action generates detailed reports, including SARIF outputs, and provides options for workflow failure conditions, Slack notifications, and SBOM artifact uploads, streamlining security compliance and enhancing overall code quality.
What’s Changed
Full Changelog: https://quantumviper.com/changelog