contactdavidpersonal-code/Custodia Security Scan
OWASP Top 10 + AI security scanning with compliance mapping (SOC 2, NIST, EU AI Act). No per-seat pricing, no config required.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-key | Your Custodia API key. Store as a repository secret: CUSTODIA_API_KEY | yes | — |
| mode | "diff" scans only changed files (fast, quota-efficient). "full" scans the entire repo. Default: diff on pull_request, full on push to main/master. | no | auto |
| path | Path to scan. Defaults to the repository root. | no | . |
| fail-on | Fail the job if findings at this severity or above are found. Options: CRITICAL, HIGH, MEDIUM, LOW, none. Default: HIGH | no | HIGH |
| args | Additional arguments to pass to custodia scan (e.g. "--no-cache") | no | "" |
Outputs
| name | description |
|---|---|
| score | Security score (0–100) |
| findings-count | Total number of findings |
| report-path | Path to the generated Markdown report |