diomonogatari/mcp-guard
Fail CI when a C# MCP server ships prompt-injection or tool-poisoning in its tool descriptions. Builds your project with the mcp-guard Roslyn analyzer and escalates every MCPGxxx finding to an error. Your project must reference the McpGuard.Analyzers package.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| project | Project or solution to analyze. Leave empty to let dotnet pick the single project/solution in the working directory. | no | "" |
| configuration | Build configuration. | no | Release |
| dotnet-version | SDK version(s) to install via actions/setup-dotnet (one per line). Leave empty to use the SDK already on the runner. | no | "" |
| warnings-as-errors | Escalate mcp-guard findings to build errors so they fail CI. | no | true |
| rules | Semicolon-separated rule ids to escalate to errors. Defaults to the warning-severity mcp-guard rules; the Info rules (MCPG007, MCPG011) are advisory and not failed by default, and MCPG012 is already an error. | no | MCPG001;MCPG002;MCPG003;MCPG004;MCPG005;MCPG006;MCPG008;MCPG009;MCPG010;MCPG013 |
| working-directory | Directory to run in. | no | . |
Outputs
no outputs