bashaarjavaid/MCP Sentinel
Scan a Python MCP server and upload validated SARIF to GitHub code scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target-path | Repository-relative path to the MCP server to scan. | no | . |
| fail-on | Lowest non-suppressed finding severity that fails the Action. | no | high |
| openai-api-key | OpenAI API key used for required live GPT semantic review. | no | "" |
| static-only | Skip Docker-backed dynamic probing while retaining GPT review. | no | false |
Outputs
| name | description |
|---|---|
| sarif-path | Absolute path to the validated Sentinel SARIF report. |
| findings-count | Number of visible SARIF results, including suppressed findings. |
| highest-severity | Highest non-suppressed severity, or none. |