hephaestus-devkit/AgentReady

Preflight security scan before AI coding agents access a repository.

Trust Signals

name	description	required	default
path	Project path to scan.	no	.
fail-on	Lowest severity that fails CI. Use high, medium, low, info, or none.	no	medium
format	Output format. Use text, json, markdown, or sarif.	no	text
output	Optional report output file.	no	""
baseline	Optional AgentReady baseline file.	no	""
config	Optional AgentReady configuration file.	no	""
max-findings	Optional maximum number of detailed findings to print.	no	""
max-file-size	Optional maximum file size, in bytes, to read during scans.	no	""
summary-only	Print only the summary and next steps.	no	false
group-by	Finding grouping for text and Markdown output. Use severity or category.	no	severity
upload-sarif	Upload the output SARIF file to GitHub code scanning. Requires format=sarif and output to be set.	no	false

no outputs