odnamta/SecBot Security Scan
Run SecBot security scan on your web application and post results as PR comment
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target-url | Target URL to scan | yes | — |
| profile | Scan profile: quick, standard, deep | no | quick |
| format | Output formats (comma-separated): terminal,json,html,sarif,bounty | no | terminal,sarif |
| exclude-checks | Checks to skip (comma-separated): traversal,cmdi,sqli,etc. | no | "" |
| baseline | Path to baseline file for diff mode | no | "" |
| no-ai | Skip AI interpretation | no | false |
| fail-on-findings | Fail the action if high/critical findings are detected | no | true |
| comment-on-pr | Post results as PR comment | no | true |
| anthropic-api-key | Anthropic API key for AI features | no | "" |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| exit-code | SecBot exit code (0=clean, 1=findings, 2=error) |
| report-path | Path to the generated report directory |