darusrus/slopscan
Security scanner for AI-generated code. Catches SQLi, secrets, SSRF, and 15 more patterns.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory or file to scan. | no | . |
| severity | Minimum severity to report. One of: CRITICAL, HIGH, MEDIUM, LOW. | no | MEDIUM |
| ai-threshold | AI confidence threshold 0.0–1.0. Files scoring above this receive the full rule set. Files below receive a lighter scan. | no | 0.6 |
| fail-on-findings | Exit with code 1 if any findings are present. | no | true |
| upload-sarif | Upload SARIF results to GitHub Security tab via github/codeql-action/upload-sarif. Requires security-events: write permission in the calling workflow. | no | true |
| python-version | Python version to use. | no | 3.11 |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings across all severities. |
| ai-files-detected | Number of files identified as AI-generated. |
| critical-count | Number of CRITICAL severity findings. |
| high-count | Number of HIGH severity findings. |
| sarif-path | Path to the generated SARIF file. |