yanacuti1121/Yana AI Security Scan
Scan AI agent configurations for security risks — secrets, permissions, hook injection, MCP vulnerabilities, prompt injection.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | Directory to scan | no | . |
| fail-on | Fail CI if findings at this severity or above (low/medium/high/critical) | no | high |
| ignore | Space-separated finding IDs to suppress (e.g. "AU010 CI008") | no | "" |
| diff-only | Only scan files changed vs base branch (true/false) | no | false |
| sarif | Upload SARIF to GitHub Code Scanning (true/false) | no | true |
| comment-on-pr | Post findings summary as PR comment (true/false) | no | true |
| yana-ai-ref | Yana AI ref to use (tag, branch, or SHA) | no | main |
Outputs
| name | description |
|---|---|
| risk-level | Overall risk level (CRITICAL/HIGH/MEDIUM/LOW) |
| score | Security score (0-100) |
| findings-count | Total number of findings |
| sarif-path | Path to generated SARIF file |