salimassili62-afk/AI Security Copilot
Scan code and prompts for LLM security vulnerabilities (OWASP LLM Top 10)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-key | API key for AI Security Copilot (get from https://ai-agent-security-copilot.vercel.app) | yes | — |
| scan-path | Path to scan (defaults to repository root) | no | . |
| fail-on-high | Fail the build if HIGH severity vulnerabilities are found | no | true |
| fail-on-critical | Fail the build if CRITICAL severity vulnerabilities are found | no | true |
| include-patterns | File patterns to include (comma-separated, e.g., "*.js,*.ts,*.prompt") | no | *.js,*.ts,*.jsx,*.tsx,*.py,*.prompt,*.txt,*.md,*.json,*.yaml,*.yml |
| exclude-patterns | File patterns to exclude (comma-separated) | no | node_modules/**,dist/**,build/**,.git/**,*.lock,package-lock.json,yarn.lock |
| max-file-size | Maximum file size in KB to scan | no | 500 |
| pr-comment | Post findings as PR comment (requires GITHUB_TOKEN) | no | true |
| github-token | GitHub token for PR comments (usually secrets.GITHUB_TOKEN) | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| summary | JSON summary of scan results |
| high-count | Number of HIGH severity findings |
| critical-count | Number of CRITICAL severity findings |
| total-findings | Total number of findings |
| has-failures | Whether the scan failed (true/false) |