auspeo/OAuthLint

Catch OAuth/OIDC/JWT anti-patterns AI coding tools systematically produce.

Trust Signals

name	description	required	default
path	Path to scan (defaults to the repo root).	no	.
severity	Filter findings: only emit those at this severity or above (INFO\|LOW\|MEDIUM\|HIGH\|CRITICAL).	no	""
fail-on	Fail the job if any finding has this severity or above. Use "off" to never fail.	no	HIGH
json	When true, emit JSON in addition to pretty output.	no	false
output	Path to write the JSON report (only used when json=true).	no	oauthlint-report.json
sarif	When true, emit a SARIF 2.1.0 report for GitHub Code Scanning.	no	false
sarif-file	Path to write the SARIF report (only used when sarif=true).	no	oauthlint.sarif
html	When true, emit a self-contained HTML audit report you can share or upload as an artifact.	no	false
html-file	Path to write the HTML report (only used when html=true).	no	oauthlint-report.html
annotations	Emit inline PR annotations + a Markdown job summary for each finding. Set to "false" to opt out.	no	true

name	description
findings	Number of findings (after severity filtering).
highest-severity	Highest severity in the report.
sarif-file	Path to the generated SARIF report (only set when sarif=true).
html-file	Path to the generated HTML report (only set when html=true).