apisec-inc/AI Surface Check
Map AI attack surfaces in pull requests and gate new high-risk findings before merge.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory to scan, relative to the repository root. | no | . |
| comment-on-pr | Post (or update) a PR comment with the AI surface report. Set to "false" to disable. | no | true |
| fail-on-risk | Exit non-zero if any risk indicators are detected. Aggressive; prefer fail-on for a severity threshold. | no | false |
| fail-on | Severity-threshold gate: fail the build if a finding is at or above this severity (critical|high|medium|low). On PRs with a base ref, gates only on NEWLY introduced findings. Recommended: high. | no | "" |
| write-inventory | Write .ai-inventory.md back to the workspace. | no | false |
| github-token | Token used to post PR comments. Defaults to the workflow GITHUB_TOKEN. | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| surfaces-count | Number of production AI surfaces detected. |
| risk-count | Number of risk indicators detected. |
| json-report | Path to the JSON report file (inside the runner workspace). |