precogsai/Precogs AI Security Scan
AI security scanner — finds vulnerabilities, secrets, PII & insecure dependencies. Free tier included.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-key | Precogs API key (from app.precogs.ai). Required for SAST and dependency scanning. Secret scanning works without it. | no | "" |
| severity-threshold | Minimum severity to fail the check: low, medium, high, critical | no | high |
| scan-secrets | Enable free secret/PII scanning (regex + entropy, runs locally) | no | true |
| scan-code | Enable AI code scan (SAST) — requires api-key | no | true |
| scan-dependencies | Enable dependency vulnerability scan (SCA) — requires api-key | no | true |
| fail-on-findings | Fail the workflow if findings meet severity threshold | no | true |
| sarif-output | Path to write SARIF output file (for GitHub Code Scanning integration) | no | "" |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| critical-count | Number of critical findings |
| high-count | Number of high findings |
| secrets-count | Number of secrets/PII found |
| report-url | URL to full report on app.precogs.ai |
| sarif-file | Path to generated SARIF file |