inkog-io/Inkog - AI Agent Pre-Flight Check

Pre-flight check for AI agents. Find logic flaws, security risks, and compliance gaps before deployment.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Jun 7, 2026
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: inkog-io/inkog@b460bd1c4f031f54f38ff505f95059bd65e83103 # v1.2.1

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
path	Path to scan (file or directory)	no	.
policy	Security policy: low-noise, balanced, comprehensive, governance, eu-ai-act	no	balanced
severity	Minimum severity level: critical, high, medium, low	no	low
output	Output format: text, json, sarif	no	text
diff	Show only new findings since baseline (for PR checks)	no	false
baseline	Path to baseline file for diff mode	no	.inkog-baseline.json
update-baseline	Update baseline file after scan (use on main branch)	no	false
fail-on-findings	Fail the workflow if findings are detected	no	true
comment-on-pr	Post scan results as a PR comment	no	true
sarif-upload	Upload SARIF results to GitHub Security tab	no	true
api-key	Inkog API key (required - get yours at https://app.inkog.io)	yes	—
agent-name	Agent name for dashboard identification (default: repository name)	no	""
version	Inkog CLI version to use (default: latest)	no	latest

Outputs

name	description
findings-count	Total number of security findings
critical-count	Number of critical severity findings
high-count	Number of high severity findings
medium-count	Number of medium severity findings
low-count	Number of low severity findings
risk-score	Overall risk score (0-100)
sarif-file	Path to SARIF output file
is-regression	True if new critical/high findings detected (diff mode)
exit-code	Scan exit code (0=clean, 1=findings, 2=error)