GitHub - murphysecurity/actions: GitHub actions for analyzing SBOM information and identifying security vulnerabilities within your project. 用于在GitHub CI中自动化分析项目SBOM信息并识别项目安全漏洞

MurphySec code scan

Integrating the MurphySec code security detection tool into the CI/CD process can detect security vulnerabilities in real time for each code update and quickly repair these security vulnerabilities.

Usage

Inputs

  • MURPHYSEC_TOKEN: MurphySec official website token

Go to MurphySec platform - Access Token, click the copy button after the Token, then the access token is copied to the clipboard.

Example usage

name: "MurphySec code scan"
on:
  push:
    branches:
      - main
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: MurphySec code scan
        uses: murphysecurity/actions@v1
        with:
          MURPHYSEC_TOKEN: ${{ secrets.MURPHYSEC_TOKEN }}