i3eg1nner/MoonBit Security Audit
AST-level static security scanner for MoonBit projects — detects XSS, CORS misconfiguration, path traversal, CRLF injection, and more
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to the MoonBit project to scan (relative to workspace root) | no | . |
| format | Output format: text, json, sarif | no | sarif |
| severity | Minimum severity to report: error, warning, info | no | warning |
| fail-on-findings | Fail the workflow step if any findings are detected | no | false |
| upload-sarif | Upload SARIF results to GitHub Code Scanning (requires security-events: write permission) | no | true |
Outputs
| name | description |
|---|---|
| findings-count | Number of security findings detected |
| report-file | Path to the generated report file |