kahramanemir/Vallum Scan
Static security scan of MCP configs and agent skill/context files, with SARIF upload to GitHub code scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Vallum release tag to install (e.g. v0.8.12). Defaults to the ref this action was pinned at. | no | "" |
| paths | Files or directories to scan. | no | . |
| fail-on | Fail the job on findings: high | warning | never. | no | high |
| upload-sarif | Upload the SARIF result to GitHub code scanning. | no | true |
Outputs
| name | description |
|---|---|
| sarif-file | Path of the generated SARIF file. |
| exit-code | Raw vallum scan exit code (0/10/20/125). |