actions-marketplace-validations/SOC2 Compliance Audit
AI-powered SOC2 compliance audit using agents that check your repo against Trust Service Criteria.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 5, 2026
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/opper-ai_opper-soc2-audit-action@06a9915c969c118012b2aaa463591a52508c0cfd # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| opper-api-key | Opper API key for the LLM agents | yes | — |
| github-token | GitHub token for API access. Needs read access to the repo being audited. | no | ${{ github.token }} |
| model | Opper model identifier for the LLM agents (e.g. gcp/claude-sonnet-4.5-eu, anthropic/claude-sonnet-4) | no | gcp/claude-sonnet-4.5-eu |
| upload-artifact | Whether to upload the report as a workflow artifact | no | true |
| create-issues | Create or update GitHub Issues for critical and high findings | no | false |
| auto-fix | Attempt to fix findings using an Opper agent and open PRs (implies create-issues) | no | false |
Outputs
| name | description |
|---|---|
| report-path | Path to the generated SOC2 report |
| total-findings | Total number of findings |
| critical | Number of critical findings |
| high | Number of high findings |
| medium | Number of medium findings |
| low | Number of low findings |
| risk-level | Overall risk level (Critical, High, Medium, Low) |
| categories-checked | Number of SOC2 categories checked |