GitHub Action reference
Inputs
| Input | Default | Description |
|---|---|---|
path |
. |
Directory to scan |
severity |
low |
Minimum severity to report |
fail-on |
high |
Fail at this severity or above (none = never fail) |
format |
sarif |
Output format: sarif, json, console |
upload-sarif |
true |
Upload SARIF to GitHub Security tab |
include-user-config |
false |
Scan user-level agent configs |
rules |
Comma-separated rule IDs to include | |
exclude-rules |
Comma-separated rule IDs to skip | |
ignore-paths |
Comma-separated paths to exclude | |
config |
Path to .agent-audit-kit.yml |
Outputs
| Output | Description |
|---|---|
findings-count |
Total number of findings |
critical-count |
Count of CRITICAL findings |
high-count |
Count of HIGH findings |
sarif-file |
Path to SARIF output file |
exit-code |
0 = pass, 1 = findings exceed threshold |
VS Code Extension
A VS Code/Cursor extension is available in vscode-extension/:
cd vscode-extension && npm install && npm run compile
Provides inline diagnostics on file save with quick-fix suggestions.