aiconnai/AgentShield Security Scanner
Scan supported AI agent extension frameworks for security vulnerabilities
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 9, 2026
- License
- None
Pinned Snippet
uses: aiconnai/agentshield@a1a571197211793422d31811be3d7735dae0a30a # v0.8.7tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (relative to repo root) | no | . |
| fail-on | Minimum severity to fail the check (info, low, medium, high, critical) | no | high |
| format | Output format (console, json, sarif) | no | sarif |
| config | Path to .agentshield.toml config file | no | "" |
| baseline | Path to an AgentShield baseline file for known findings | no | "" |
| upload-sarif | Upload SARIF results to GitHub Code Scanning | no | true |
| ignore-tests | Skip test files (test/, tests/, __tests__/, *.test.ts, *.spec.ts, etc.) | no | false |
| version | AgentShield version to use (default: latest). Accepts a version with or without a "v" prefix, e.g. v0.8.0 or 0.8.0. | no | latest |
| binary-path | Path to an existing AgentShield binary; skips release download when set | no | "" |
Outputs
| name | description |
|---|---|
| finding-count | Number of findings detected |
| sarif-file | Path to the SARIF output file (if format=sarif) |
| exit-code | Exit code from the scan (0=pass, 1=fail, 2=error) |