sondberg84/Vibe Security Checker
Scan your repository for security vulnerabilities in AI-generated code
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (relative to repository root) | no | . |
| full | Run all check categories (secrets, injection, auth, crypto, cloud, data, debug, https, ssrf, jwt, headers) | no | true |
| checks | Comma-separated list of specific checks to run (overrides full) | no | "" |
| min_severity | Minimum severity to report: CRITICAL, HIGH, MEDIUM, LOW | no | LOW |
| fail_on | Exit with failure if findings of this severity or higher are found: CRITICAL, HIGH, MEDIUM, LOW, NONE | no | HIGH |
| sarif | Upload SARIF results to GitHub Advanced Security | no | true |
| sarif_file | Path for SARIF output file | no | vibe-security-results.sarif |
| scan_history | Also scan git history for secrets (slower) | no | false |
| max_history_commits | Maximum commits to scan in git history | no | 200 |
| baseline | Path to baseline file — only report new findings not in the baseline | no | "" |
Outputs
| name | description |
|---|---|
| findings_count | Total number of findings |
| critical_count | Number of CRITICAL findings |
| high_count | Number of HIGH findings |
| grade | Security grade: A, B, C, D, or F |
| sarif_file | Path to generated SARIF file |