nhomyk/AgenticQA Architecture Scan
Map every integration point in your AI codebase — 13 CWE categories, SARIF output, test coverage gaps. No API key.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| repo-path | Path to the repository to scan (default: current directory) | no | . |
| fail-on-critical | Exit with code 1 if any critical integration areas are found | no | false |
| fail-on-score | Exit with code 1 if attack surface score meets or exceeds this value (0 = disabled) | no | 0 |
| sarif-output | Filename for the SARIF output file | no | agenticqa-scan-results.sarif |
| upload-sarif | Upload SARIF to GitHub Code Scanning (requires security-events: write permission) | no | true |
| category | GitHub Code Scanning SARIF category (useful when running multiple scans) | no | agenticqa-architecture |
Outputs
| name | description |
|---|---|
| findings-count | Total number of integration areas found across all 13 categories |
| critical-count | Number of critical-severity integration areas (SHELL_EXEC) |
| attack-surface-score | Attack surface score 0–100 (higher = more exposed) |
| test-coverage | Test coverage confidence 0–100 for detected integration areas |
| untested-count | Number of integration areas with no test coverage |
| sarif-file | Path to the generated SARIF output file |