Protect the first phase of your software supply chain

Required Token provided by argon. This is sensitive, add this as a secret

Multiline list of checks to run. Defaults to all.

If true the action will never fail the workflow. Defaults to false.

If true a notification will be sent to the configured Slack/Teams channel on new findings. Defaults to false.

If true argon won't review the pull request with comments for each finding. Defaults to false.

- name: Argon Security
  uses: argonsecurity/[email protected]
  with:
    audit-only: true
    should-notify: true
    argon-token: "${{ secrets.ARGON_TOKEN }}"