alxxy123/Security Scanner
Enhanced AI-Powered Security Scanner with vulnerability detection
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Mar 4, 2026
- License
- None
Pinned Snippet
uses: alxxy123/code-scan-sec@8ca23ab1a7ea79cabc48e3e6c565e4b8276c9abe # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan for security issues | no | . |
| ai-provider | AI provider to use (gemini, openai, claude) | no | gemini |
| enable-ai | Enable AI verification for secrets | no | true |
| enable-vulnerabilities | Enable vulnerability scanning | no | true |
| output-format | Report output format (html, markdown, json, text, all) | no | all |
| gemini-api-key | Google Gemini API key | no | — |
| openai-api-key | OpenAI API key | no | — |
| anthropic-api-key | Anthropic Claude API key | no | — |
| fail-on-critical | Fail the workflow if critical issues are found | no | true |
| fail-on-secrets | Fail the workflow if secrets are found | no | true |
Outputs
| name | description |
|---|---|
| total-secrets | Total number of secrets found |
| total-vulnerabilities | Total number of vulnerabilities found |
| critical-vulnerabilities | Number of critical vulnerabilities found |
| high-vulnerabilities | Number of high vulnerabilities found |
| report-path | Path to the generated report |