mahdi-salmanzade/Laravel Hack Auditor
AI-powered security scanning for Laravel apps. Posts findings as PR review comments with inline annotations.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-key | API key for the AI provider (Anthropic, OpenAI, or Gemini) | yes | — |
| provider | AI provider (anthropic, openai, gemini) | no | anthropic |
| model | AI model to use (provider-specific). Leave empty for provider default. | no | "" |
| severity | Minimum severity to report (low, medium, high, critical) | no | low |
| base-branch | Base branch for diff comparison. Defaults to auto-detect (main/master). | no | "" |
| scan-path | Specific file or directory to scan (e.g., "app/Http/Controllers") | no | "" |
| github-token | GitHub token for posting PR comments. Defaults to the automatic token. | no | ${{ github.token }} |
| install-package | Install hack-auditor via Composer before scanning (true/false) | no | true |
| fail-on | Fail the check if findings at this severity or above exist (none, low, medium, high, critical) | no | none |
| token-limit | Maximum token budget for the scan (0 = unlimited) | no | "" |
Outputs
| name | description |
|---|---|
| score | Overall security score (0-100) |
| total | Total number of findings |
| critical | Number of critical findings |
| high | Number of high findings |
| medium | Number of medium findings |
| low | Number of low findings |
| json_path | Path to the raw JSON results file |