GitHub Action

Purpose: Run a scan in CI without installing the binary by hand, and optionally upload SARIF to GitHub code scanning. For the full DevOps / SecOps playbook (GitOps, GitLab/CLI, agentic loops), start at CI/CD & workflow integration.

Example

- uses: sgoveia/cryptarium@v0.3.0
  with:
    path: .
    fail-on: critical
    upload-sarif: true

Pin the Action to a tagged release. The composite Action installs Go 1.26, go installs the tagged CLI ref (or builds from the Action checkout on non-tag refs), runs the report scan with your fail-on, then — when upload-sarif is true — runs a second SARIF scan with --fail-on none and --deterministic so upload still happens if the gate fails.

Inputs

Input	Default	Description
`path`	`.`	Repository path to scan
`fail-on`	`none`	Fail the job when priority reaches `critical`, `high`, `medium`, `low`, or `none`
`format`	`markdown`	Human report format: `markdown`, `json`, or `cbom`
`output`	`CRYPTO-REPORT.md`	Output path for that report format
`upload-sarif`	`true`	Emit `results.sarif` and upload to Security → Code scanning

Requires security-events: write on the job (or workflow) when uploading SARIF.

GitHub Action

Example

Inputs

Related