lexes7/XSEC security scan
Scan a repository for vulnerabilities in AI-written code and (optionally) upload SARIF to GitHub code scanning.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | File or directory to scan. | no | . |
| fail-on | Fail the job if any finding is at or above this severity (INFO/LOW/MEDIUM/HIGH/CRITICAL). Empty disables gating. | no | HIGH |
| min-severity | Hide findings below this severity. | no | LOW |
| deps | Also scan dependencies for known CVEs (true/false). | no | false |
| sarif-file | Write SARIF output to this path (for upload to code scanning). Empty disables. | no | xsec.sarif |
| extras | pip extras to install, e.g. 'treesitter,deps'. | no | treesitter,deps |
Outputs
no outputs