Merge pull request #31 from orcasecurity/OCI-263-support-disable-acti…

…ve-verification-flag

CICD-263: support "disable-active-verification" flag

README.md

@@ -87,6 +87,7 @@ jobs:
 | security_checks              | secret                       | List of security issues to detect (comma-separated)                                        | String  | No       | vulns,secret |
 | debug                        | true                         | Debug mode                                                                                 | Boolean | No       | false        |
 | log_path                     | results/                     | The directory path to specify where the logs should be written to on debug mode.           | String  | No       | working dir  |
+| disable_active_verification  | true                         | Disable active verification of secrets                                                     | Boolean | No       | false        |
 
 ## Annotations
 After scanning, the action will add the results as annotations in a pull request:

action.yaml

@@ -111,6 +111,10 @@ inputs:
     description: "Debug mode"
     required: false
     default: "false"
+  disable_active_verification:
+    description: "Disable active verification"
+    required: false
+    default: "false"
   log_path:
     description: "The directory path to specify where the logs should be written to on debug mode. Default to the current working directory"
     required: false

entrypoint.sh

@@ -51,6 +51,9 @@ function set_global_flags() {
   if [ "${INPUT_DEBUG}" == "true" ]; then
     GLOBAL_FLAGS+=(--debug)
   fi
+  if [ "${INPUT_DISABLE_ACTIVE_VERIFICATION}" == "true" ]; then
+    GLOBAL_FLAGS+=(--disable-active-verification)
+  fi
   if [ "${INPUT_LOG_PATH}" ]; then
     GLOBAL_FLAGS+=(--log-path "${INPUT_LOG_PATH}")
   fi