bhargav1815/PRISM Security Scanner
Multi-engine security scanner — AST, Secrets, SCA, Taint. Privacy-first. No code sent to third-party servers.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | Path to the directory to scan (relative to repo root) | no | . |
| fail-on-severity | Fail the workflow if findings at or above this severity are found. Options: LOW, MEDIUM, HIGH, CRITICAL | no | HIGH |
| report-format | Output report format. Options: docx, html, both | no | both |
| azure-openai-key | Azure OpenAI API key for Premium AI features (false positive filtering, fix suggestions, risk scoring) | no | "" |
| azure-openai-endpoint | Azure OpenAI endpoint URL | no | "" |
| azure-openai-deployment | Azure OpenAI deployment name (model) | no | gpt-4o |
| custom-rules | Path to a custom YAML rules file | no | "" |
| enable-container-scan | Enable container/IaC scanning via Trivy (requires Trivy to be available on the runner) | no | false |
| dry-run-ai | Print the AI prompt to console without sending it (for auditing what is sent to AI) | no | false |
| github-token | GitHub token used to post a findings summary comment on pull requests. Pass secrets.GITHUB_TOKEN. | no | "" |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| critical-count | Number of CRITICAL severity findings |
| high-count | Number of HIGH severity findings |
| report-path | Path to the generated report file(s) |