VAPT Insights Security Scan

Version updated for https://github.com/vaptinsights/security-scan-action to version v1.0.0.

• This action is used across all versions by ? repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

What’s Changed

VAPT Insights Security Scan v1.0.0

Initial GitHub Marketplace release of the VAPT Insights Security Scan Action.

Features

• Generates CycloneDX SBOMs using Trivy
• Uploads SBOM results securely to VAPT Insights
• Supports complete repository scans
• Supports nested application folders
• Supports matrix-based monorepo service scanning
• Uses commit SHA values for artifact versioning
• Supports custom artifact names and versions

Usage

- name: Run VAPT Insights Security Scan
  uses: vaptinsights/security-scan-action@v1
  with:
    api-key: ${{ secrets.VAPT_INSIGHTS_API_KEY }}
    scan-path: .
    artifact-name: ${{ github.event.repository.name }}

• Vaptinsights
• GitHub Actions