marshallguillory86/secure-code-agent
Deterministic security gate + bounded AI remediation prompts. NIST SSDF / OWASP ASVS / CWE Top 25 anchored.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| config | Path to secure-code-agent config (JSON). | no | secure-code-agent.json |
| paths | Paths to scan (default: current directory). | no | . |
| changed-only | Audit only files changed since REF (e.g. main...HEAD). | no | "" |
| fail-on-gate | Exit nonzero if any configured gate trips. | no | true |
| fail-on-new | Exit nonzero on findings not in baseline. | no | false |
| sarif-output | Path to write SARIF 2.1.0 output. | no | secure-code.sarif |
| upload-sarif | Upload SARIF to GitHub Code Scanning. | no | true |
Outputs
| name | description |
|---|---|
| sarif-path | Path to the emitted SARIF file. |
| passed | Whether all gates passed. |