open-agent-security/OpenACA Scan
Scan your repo's AI-agent stack (MCP servers, plugins, skills) for known vulnerabilities.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | Path to scan (defaults to the consumer's GITHUB_WORKSPACE). | no | ${{ github.workspace }} |
| sarif | SARIF output path (relative to the consumer's workspace). | no | openaca-results.sarif |
| fail-on | Severity threshold for non-zero exit (high | any | none). | no | any |
Outputs
| name | description |
|---|---|
| sarif-path | Path to the generated SARIF file. |