sssafeman/SecureScan Security Audit
AI-powered security audit using Claude Opus 4.6. Finds vulnerabilities, generates patches, uploads SARIF results.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| anthropic-api-key | Anthropic API key for LLM analysis | yes | — |
| repo-path | Path to the repository to scan (default: current repo) | no | . |
| config-path | Path to .securescan.yml config file | no | "" |
| skip-llm | Skip LLM analysis (detection only) | no | false |
| min-severity | Minimum severity to report (low, medium, high, critical) | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab | no | true |
| diff-base | Git ref to diff against for PR scanning (e.g., origin/main). If set, only changed files are scanned. | no | "" |
| model | Claude model to use (claude-opus-4-6, claude-sonnet-4-5-20250929) | no | "" |
Outputs
| name | description |
|---|---|
| sarif-file | Path to the generated SARIF report |
| html-report | Path to the generated HTML report |
| json-report | Path to the generated JSON report |
| findings-count | Number of confirmed findings |