| github-token | GitHub token | yes | — |
| allowed-users | List of usernames to skip from scanning. Can use array syntax in workflow YAML. | no | "" |
| trusted-author-associations | List of author associations to skip from scanning (collaborator, contributor, first_timer, first_time_contributor, member, owner). Can use array syntax in workflow YAML. | no | "" |
| scan-pull-requests | Whether to analyze pull request authors. True by default. | no | true |
| scan-issues | Whether to analyze issue authors. False by default. | no | false |
| mode | How AgentScan should act on its findings: 'full' (comment and labels), 'labels' (labels only), 'comment' (comment only), or 'silent' (outputs only, no comment or labels). | no | full |
| comment-on-organic | Whether to post a comment when the analysis result is 'organic'. False by default. | no | false |
| cache-path | Path to cache directory (e.g., '.agentscan-cache') - if provided, analysis results will be cached | no | "" |
| label-community-flagged | Label to add when an account is flagged by the community | no | agentscan:community-flagged |
| label-mixed | Label to add when an account has mixed automation signals | no | agentscan:mixed-signals |
| label-automation | Label to add when an account is classified as automated | no | agentscan:automated-account |
| auto-close | Whether to automatically close issues/PRs for detected automations | no | false |
| auto-close-classifications | Comma-separated list of classifications that trigger auto-close (organic, mixed, automation). Defaults to 'automation'. Can use array syntax in workflow YAML. | no | automation |
| message-organic | Custom message to display when account is classified as organic. If not provided, default message will be used. | no | "" |
| message-mixed | Custom message to display when account has mixed automation signals. If not provided, default message will be used. | no | "" |
| message-automation | Custom message to display when account is classified as automated. If not provided, default message will be used. | no | "" |
| message-community-flagged | Custom message to display when account is flagged by the community. If not provided, default message will be used. | no | "" |