fraim-dev/Fraim Security
Run Fraim AI-powered workflows on your code and upload results to GitHub Security tab
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| workflow | Workflow to run. Available: code, iac, risk_flagger | yes | — |
| workflow_args | Workflow-specific arguments. See specific workflow docs for details. | no | {} |
| gemini-api-key | Google Gemini API key for AI analysis | no | — |
| openai-api-key | OpenAI API key for AI analysis (alternative to Gemini) | no | — |
| anthropic-api-key | Anthropic API key for AI analysis (alternative to Gemini/OpenAI) | no | — |
| github-token | GitHub token for authentication (needed if you want to request reviewers) | no | — |
| github-app-id | GitHub App ID for authentication (alternative to github-token) | no | — |
| github-app-private-key | GitHub App private key for authentication (alternative to github-token) | no | — |
| model | AI model to use for analysis | no | anthropic/claude-sonnet-4-20250514 |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF file |
| results-count | Number of security findings |