opper-ai/SOC2 Compliance Audit
AI-powered SOC2 compliance audit using agents that check your repo against Trust Service Criteria.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| opper-api-key | Opper API key for the LLM agents | yes | — |
| github-token | GitHub token for API access. Needs read access to the repo being audited. | no | ${{ github.token }} |
| model | Opper model identifier for the LLM agents (e.g. gcp/claude-sonnet-4.5-eu, anthropic/claude-sonnet-4) | no | gcp/claude-sonnet-4.5-eu |
| upload-artifact | Whether to upload the report as a workflow artifact | no | true |
| create-issues | Create or update GitHub Issues for critical and high findings | no | false |
| auto-fix | Attempt to fix findings using an Opper agent and open PRs (implies create-issues) | no | false |
Outputs
| name | description |
|---|---|
| report-path | Path to the generated SOC2 report |
| total-findings | Total number of findings |
| critical | Number of critical findings |
| high | Number of high findings |
| medium | Number of medium findings |
| low | Number of low findings |
| risk-level | Overall risk level (Critical, High, Medium, Low) |
| categories-checked | Number of SOC2 categories checked |