sameergit-ally/ShadowLeak AI Scan
Scan pull request diffs for leaked secrets, credentials, and PII using hybrid regex + entropy detection with optional AI validation.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| fail-on-severity | Minimum severity that fails the build. One of: Critical, High, Medium, Low. | no | Critical |
| ai-validation | Whether to run the AI validation layer (true) or use regex/entropy heuristics only (false). Requires GROQ_API_KEY or GEMINI_API_KEY when enabled; falls back to heuristics automatically if no key is set. | no | true |
| groq-api-key | Groq API key for AI validation (passed as a secret) | no | "" |
| gemini-api-key | Gemini API key for AI validation (passed as a secret) | no | "" |
| ai-provider | AI provider to use: groq or gemini | no | groq |
| github-annotations | Emit GitHub Actions workflow commands for inline PR annotations | no | true |
Outputs
no outputs