@@ -6,6 +6,9 @@ It supports multiple scan types:
66- ** SCA** → Software Composition Analysis
77- ** SBOM** → Software Bill of Materials generation
88- ** SAST** → Static Application Security Testing
9+ - ** IAC SCAN** → Infrastructure as Code — checks configuration files (Terraform, Kubernetes, etc.) for misconfigurations.
10+ - ** SECRET SCAN** → Secret Detection — finds hardcoded credentials, API keys, and sensitive information in source code.
11+
912
1013This action makes it easy to integrate Vigilnz scanning into your GitHub workflows.
1114
6063 uses : vigilnz/vigilnz-scan-action@v1
6164 with :
6265 vigilnzApiKey : ${{ secrets.VIGILNZ_API_KEY }}
63- scanTypes : " sca,sbom,sast "
66+ scanTypes : " SCA,SBOM,SAST,SECRET SCAN,IAC SCAN "
6467
6568```
6669
6972| Name | Required | Description |
7073| ---------------| ----------| ------------------------------------------------------------|
7174| vigilnzApiKey | True | Your Vigilnz API key (stored securely in GitHub Secrets). |
72- | scanTypes | True | Comma-separated list: ` sca,sast,sbom ` |
75+ | scanTypes | True | Comma-separated list: ` SCA,SBOM,SAST,SECRET SCAN,IAC SCAN ` |
7376
7477
7578## Example Scenarios
@@ -79,14 +82,14 @@ jobs:
7982``` yaml
8083with :
8184 vigilnzApiKey : ${{ secrets.VIGILNZ_API_KEY }}
82- scanTypes : " sca "
85+ scanTypes : " SCA "
8386` ` `
8487
8588### Run all scans:
8689
8790` ` ` yaml
8891with :
8992 vigilnzApiKey : ${{ secrets.VIGILNZ_API_KEY }}
90- scanTypes : " sca,sbom,sast "
93+ scanTypes : " SCA,SBOM,SAST,SECRET SCAN,IAC SCAN "
9194` ` `
9295
0 commit comments