# InspectorSourceCodeScanActionProps

Construction properties of the `InspectorSourceCodeScanAction`.

Extends: InspectorSourceCodeScanActionProps
Extends: InspectorScanActionBaseProps
Used as props by: InspectorSourceCodeScanAction

- Source: [`aws-codepipeline-actions/lib/inspector/source-code-scan-action.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-codepipeline-actions/lib/inspector/source-code-scan-action.ts#L9)
- Type last changed: v2.188.0 · 4 Apr 2025

## Example

```ts
declare const pipeline: codepipeline.Pipeline;

const sourceOutput = new codepipeline.Artifact();
const sourceAction = new codepipeline_actions.CodeStarConnectionsSourceAction({
  actionName: 'CodeStarConnectionsSourceAction',
  output: sourceOutput,
  connectionArn: 'your-connection-arn',
  owner: 'your-owner',
  repo: 'your-repo',
});

const scanOutput = new codepipeline.Artifact();
const scanAction = new codepipeline_actions.InspectorSourceCodeScanAction({
  actionName: 'InspectorSourceCodeScanAction',
  input: sourceOutput,
  output: scanOutput,
});

pipeline.addStage({
  stageName: 'Source',
  actions: [sourceAction],
});
pipeline.addStage({
  stageName: 'Scan',
  actions: [scanAction],
});
```

## Properties

- `actionName`: string (required) — The physical, human-readable name of the Action.

  Note that Action names must be unique within a single Stage.

- `criticalThreshold`: number — The number of critical severity vulnerabilities found in your source beyond which CodePipeline should fail the action.

  **Default:** no threshold

- `highThreshold`: number — The number of high severity vulnerabilities found in your source beyond which CodePipeline should fail the action.

  **Default:** no threshold

- `input`: [Artifact](/cdk/api/v2/docs/aws-cdk-lib.aws_codepipeline.Artifact.html) (required) — The source code to scan for vulnerabilities.

- `lowThreshold`: number — The number of low severity vulnerabilities found in your source beyond which CodePipeline should fail the action.

  **Default:** no threshold

- `mediumThreshold`: number — The number of medium severity vulnerabilities found in your source beyond which CodePipeline should fail the action.

  **Default:** no threshold

- `output`: [Artifact](/cdk/api/v2/docs/aws-cdk-lib.aws_codepipeline.Artifact.html) (required) — Vulnerability details of your source in the form of a Software Bill of Materials (SBOM) file.

- `role`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) — The Role in which context's this Action will be executing in.

  **Default:** a new Role will be generated

  The Pipeline's Role will assume this Role
  (the required permissions for that will be granted automatically)
  right before executing this Action.
  This Action will be passed into your `IAction.bind`
  method in the `ActionBindOptions.role` property.

- `runOrder`: number = 1 — The runOrder property for this Action.

  RunOrder determines the relative order in which multiple Actions in the same Stage execute.

- `variablesNamespace`: string — The name of the namespace to use for variables emitted by this action.

  **Default:** a name will be generated, based on the stage and action names, if any of the action's variables were referenced - otherwise, no namespace will be set