Skip to content

GitHub Action reference

Inputs

Input Default Description
path . Directory to scan
severity low Minimum severity to report
fail-on high Fail at this severity or above (none = never fail)
format sarif Output format: sarif, json, console
upload-sarif true Upload SARIF to GitHub Security tab
include-user-config false Scan user-level agent configs
rules Comma-separated rule IDs to include
exclude-rules Comma-separated rule IDs to skip
ignore-paths Comma-separated paths to exclude
config Path to .agent-audit-kit.yml

Outputs

Output Description
findings-count Total number of findings
critical-count Count of CRITICAL findings
high-count Count of HIGH findings
sarif-file Path to SARIF output file
exit-code 0 = pass, 1 = findings exceed threshold

VS Code Extension

A VS Code/Cursor extension is available in vscode-extension/:

cd vscode-extension && npm install && npm run compile

Provides inline diagnostics on file save with quick-fix suggestions.