bitf4rmer/TurboPentest AI Pentest
Run an automated AI penetration test against your web application
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Mar 9, 2026
- License
- MIT
Pinned Snippet
uses: bitf4rmer/turbopentest-action@69f5c8e8ffb8e0d6172d8c8bdd6adb18ad358617 # v1.0.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| target-url | The URL to pentest (e.g. https://your-app.com) | yes | — |
| api-key | Your TurboPentest API key | yes | — |
| repo-url | Optional GitHub repo URL for white box pentesting | no | — |
| wait-for-results | Wait for scan to complete and output results (true/false) | no | false |
| max-wait | Maximum time in seconds to wait for results (default: 7200) | no | 7200 |
| api-base-url | TurboPentest API base URL (override for testing) | no | https://turbopentest.com |
Outputs
| name | description |
|---|---|
| pentest-id | The ID of the created pentest |
| pentest-url | URL to view the pentest results |
| status | Final pentest status (if wait-for-results is true) |