vimox-shah-genea/Vulnerability Agent
Automated vulnerability scanning and fixing with AI-powered code changes
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token for accessing repositories and creating PRs | yes | — |
| organization | GitHub organization to scan (leave empty to scan current repository only) | no | — |
| ai-provider | AI provider for code transformations (github-models, claude, openai, auto) | no | auto |
| anthropic-api-key | Anthropic API key for Claude integration | no | — |
| openai-api-key | OpenAI API key for GPT-4 integration | no | — |
| teams-webhook-url | Microsoft Teams webhook URL for notifications | no | — |
| vulnerability-threshold | Minimum vulnerability severity to process (low, moderate, high, critical) | no | moderate |
| auto-create-prs | Automatically create pull requests for fixes | no | true |
| max-repositories | Maximum number of repositories to scan | no | 10 |
| enable-code-changes | Enable AI-powered code transformations | no | true |
| confidence-threshold | Minimum confidence threshold for auto-applying AI fixes (0.0-1.0) | no | 0.8 |
Outputs
| name | description |
|---|---|
| vulnerabilities-found | Number of vulnerabilities found |
| fixes-applied | Number of fixes applied |
| prs-created | Number of pull requests created |
| scan-summary | JSON summary of the scan results |