adudley78/mcp-audit
Security scanner for MCP server configurations — detects prompt injection, supply chain risks, credential exposure, and more.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 14, 2026
- License
- Apache 2.0
Pinned Snippet
uses: adudley78/mcp-audit@1959b4922fe8b6ef4fea95b8326f574f157088d7 # v0.14.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| mode | Action mode: ``scan`` (default — full static analysis) or ``diff`` (MCP-aware diff between two git refs, suitable for PR comments). When ``diff``, the action runs ``mcp-audit diff $GITHUB_BASE_REF $GITHUB_HEAD_REF`` and posts the result as a PR comment (requires ``pull-requests: write`` permission). For an explicit step-by-step workflow with separate base/head scans and full control over scan flags, use ``examples/github-actions/diff-pr-comment.yml`` instead. | no | scan |
| config-paths | Space-separated list of paths to MCP config files or directories to scan. Defaults to auto-discovery (scans all known client config locations). Used only when mode is ``scan``. | no | "" |
| severity-threshold | Minimum severity to fail the build. One of: critical, high, medium, low, info. | no | high |
| sarif-output | Path to write SARIF output file. Set to empty string to skip SARIF generation. | no | mcp-audit.sarif |
| upload-sarif | Upload SARIF to GitHub Code Scanning automatically. Requires security-events: write permission. | no | true |
| check-vulns | Run OSV.dev dependency vulnerability scan (Layer 3). Requires network access. | no | false |
| verify-signatures | Run Sigstore signature verification (Layer 2). Requires network access. | no | false |
| run-sast | Also run mcp-audit SAST analysis against the path specified by sast-path. | no | false |
| sast-path | Path to run SAST analysis against. Only used when run-sast is true. Defaults to src/. | no | src/ |
| baseline-name | Name of a saved baseline to compare against. When set, the action runs `mcp-audit baseline compare <baseline-name>` after the scan and posts the diff as a step summary. Leave empty to skip baseline comparison. | no | "" |
| fail-on-findings | Fail the workflow step if findings meet or exceed severity-threshold. Set to false to report only. | no | true |
| version | mcp-audit release tag to install (e.g. "v0.10.0") or "latest" to resolve the current latest release automatically. The binary is downloaded from GitHub Releases and cached by version + OS + arch. | no | latest |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings at or above the severity threshold. |
| grade | Overall scan grade (A–F). |
| sarif-path | Absolute path to the generated SARIF file (empty if sarif-output was empty). |