Skip to content

Chain Bench action

Actions
Run software supply chain benchmark
v1.1.1
Latest
Verified creator
Star (19)

Verified

GitHub has manually verified the creator of the action as an official partner organization. For more info see About badges in GitHub Marketplace.

chain-bench logo

Chain Bench Github Action

Github Action for Chain Bench

License


Table Of Contents

Usage

Workflow

jobs:
  chain_bench_scan_example:
    runs-on: ubuntu-latest
    name: Test Job
    steps:
      - name: Chain Bench
        id: chain-bench
        uses: aquasecurity/chain-bench-action@v1.0.0
        with:
          repository-url: ${{ github.server_url }}/${{ github.repository }} # Compiles to https://github.com/aquasecurity/chain-bench-action
          github-token: ${{ secrets.GITHUB_TOKEN }}
          scm-platform: github #Optional parameter for dedicated SCM servers

      # Using the github action output from the scan step "chain-bench-result" (JSON so you can run rego/jq against it)
      - name: Echo
        run: echo ${{ steps.chain-bench.outputs.chain-bench-result }}

Action

Inputs

Following inputs

input description required
repository-url The full repository url to scan True
github-token The github token to use for scanning True
scm-platform the SCM platform for dedicated envs False

Outputs

output description
chain-bench-result JSON output from chain-bench

Chain Bench action is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.

About

Run software supply chain benchmark
v1.1.1
Latest

Verified

GitHub has manually verified the creator of the action as an official partner organization. For more info see About badges in GitHub Marketplace.

Chain Bench action is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.